For me, the hardest part to believe is there was literally no one on-site at their datacenters. Really? No one? At this scale, literally, there has to be a security guard there who can kick the door open.
I'm a fairly pro-Apple guy, love my Apple products. Had an Android user try and argue with me "so much for Apple security". Taking a pragmatic approach to this, it's hard to blame Apple for following the gag order / law, albeit corrupt law. They apparently only gave up meta data. It would be interesting to know exactly what they got or didn't (the DOJ).