Maybe? When you login from a new device you're asked to provide an OTP so maybe there is at least that layer of protection and, hopefully, requires some circumvention at the application code level.
However I think the real question is: even if that's possible, can law enforcement compel Durov or an employee to do so?
However I think the real question is: even if that's possible, can law enforcement compel Durov or an employee to do so?