Presumably a number of people at Google had access to the orders, if only to implement the government's surveillance. What's always baffling to me is how seldom stuff like this is leaked -- all it takes is one person with the right access, conscience and the technical skills to work out how to siphon off their own unofficial copy, then put that unofficial copy anonymously on the internet when the appeals to do it leg…
Is there some trick that could be built-into sensitive services like email, maybe some kind of per-account warrant canary?