Why would you get the warrant or NSL?

They could still give that to DigitalOcean, and simply see your VM's filesystem through the host server, see all your traffic, etc...