It is not possible to debate the balance between privacy and security, including the rights and wrongs of intrusive powers, without also understanding the threats.