They don't need mass surveillance and weak crypto to find out what a few known evil doers are up to. You can develop informants, physically bug devices, and get warrants for service providers (the old fashioned way where you specify a person's name and what you're looking for).

But they'd rather have a database with the sum total of human thoughts and interactions.