> They will argue that the decision was politicized,

It’s not ‘politicized’, it’s the gateway to all Dutch government services and as such it is inherently political.

> insufficiently reasoned, or disproportionate because binding technical/legal safeguards would have solved the risks...

There are no legal safeguards against the CLOUD act. There can be no technical or legal safeguards as long as the physical hardware is owned by a US company.