There's that, but there also the lazyness angle. Why go with a complicated, detectable technical solution when you can send out a NSL and have someone else do the heavy lifting for you? I strongly suspect Lavabit's reaction wasn't in any way expected.