People *should* be able to assume that ...
Maybe social media platforms should add an extra tick box to their privacy options: "Please share my data with the security services on their request, even without an appropriate court order: y/n".
Then we will find out what we should "assume" people want.