The article isn't clear whether agencies other than law enforcement are using these tools to spy internally on staff or externally on citizenry.
When I was working in gov we went through a phase where all machines had some kind of "forensic analysis agent" running on it "to capture state and data in case of a breach or malfeasance", and we argued often and long about the odds, value and effectiveness of data collection 24/7 for a hope during a fringe event.
These forensic tool companies sell fear and uncertainty very effectively, and they do not lack for paying customers who may never use the software for which they're taking on all this leak risk.
