Obviously there should be limits but what should they be?
I actually don’t think asking for phone ids for 30min before and after an event within a limited distance IS overly broad. The fact it only returned 19 initial IDs kind of shows that no?
Equally, knowing someone has been in or near a bank is not particularly intrusive. It’s not like searching who visited a lawyers office or a sexual health clinic etc.
So would a 5 min window have been ok? Or a 10minute window?
When does a warrant become “sprawling”?