It’s security logs though, presumably these carry less legal risk than chat messages or mails

Also when you don’t know how a Chinese threat group got into your network that’s a major issue which will cost more than theoretical legal risk