All the in-transit encryption in the world won't matter if they've pwned the decrypted client device.
Every company from your device's manufacturer, OS vendor, telecom carrier, app distributors and 3rd party software providers can be compelled to help make that happen.
Every company from your device's manufacturer, OS vendor, telecom carrier, app distributors and 3rd party software providers can be compelled to help make that happen.
And then there's always Cellebrite and friends.