I wonder if these types of legally-enforced privacy intrusions will bring about a new design goal for web-app builders: making retrieval of this information impossible for the service provider.

It's one thing for Twitter to promise not to give your information to government entities until asked, but it's a whole other thing to engineer their application so it's impossible to comply with such a request.