To me the specific state compliance mechanism is irrelevant here if a third country simply cares about data and security.

Of course both governments utilize all measures they can to collect intelligence.

And then decide how much of that data they share with partners, and when. This has considerable security implications.