This looks like old news to me. Years ago I've read that three letter agencies can access phones without getting the access code or bio-metrics from the phone owner.

• https://en.wikipedia.org/wiki/Grayshift
• And it was in the news recently because of the Trump shooter : https://www.theverge.com/24199357/fbi-trump-rally-shooter-phone-thomas-matthew-crooks-quantico-mdtf
• https://signal.org/blog/cellebrite-vulnerabilities (2021, crazy story)