I think some people are missing this important part of the report:

We note that the Classified Appendix contains some information that is derived from Foreign Intelligence Surveillance Act ("FISA") authorities. Accordingly, to the extent the Department determines that it is appropriate to share information contained in the Classified Appendix with congressional or other government entities outside of the Department, steps will need to be taken in accordance with that Act and any relevant Orders that have been issued by the Foreign Intelligence Surveillance Court.

Well now. I wonder what might be in that appendix?