I don't think you have to comply with NSL before you get it. If Facebook is able to detect pre-NSL surveillance (I doubt government just sends batch NSLs as a prelude to investigating potential targets), they can alert you before an official gag order tells them to shut up.