I wouldn't exactly call them "excellent", but yeah I think the big caveat is

> the US has excellent protections for PII and data privacy

*for _US nationals_ :)