I believe the point is that if the US government had policies to never use such data for anything (e.g. criminal investigations, intelligence agencies perhaps), then the EU would not be worried about the data being in the US. The US government’s behavior is why they are worried about it.