The mechanism relies on the difference between compelled silence and compelled speech: a provider that may not disclose an order can, under some legal theories, simply stop publishing a dated statement that no order exists.
Its limits are real: untested in many jurisdictions, dependent on someone noticing the silence, and only as granular as its wording. This site publishes its own dated canary page.