Depends on the law and where you are. Publicly we have https://www.eff.org/issues/national-security-letters/faq and it's likely that other requests have occurred from time to time, even in the USA.

> No one is being “required by law” to add vulnerabilities

This is absolutely not the case in many parts of the world.