They forgot an obvious question
"Is it proportional to process the data of an EU citizen for national security purposes in the third country if the person whose data is processed cannot even claim standing within the courts of that third country for lack of connection to that third country?"
Which is a fancy phrasing of "Hey CJEU, who died and made the USA the emperor and supreme generalissimo of the world?"