Here’s the hole: [The Supreme Court's ruling on] Carpenter limits what the government can compel. It says nothing clear about what the government can buy. So agencies just buy it.

They can't compell a provider to provide data without a warrant but they can just buy it on the free market.