They can pass laws requiring software to be backdoored without allowing the company to notify the public (similar to what happened to Lavabit), or can use three letter agencies to backdoor most software anyway (similar to what happened with Dual_EC_DRBG).