If they are doing things substantially differently than outlined in that whitepaper, and so actually do have access to locked devices, then they would have just

If they are doing things substantially differently than outlined in that whitepaper, and so actually do have access to locked devices, then they would have just perjured themselves and exposed themselves to extraordinary liability. Which makes me think they are probably telling the truth - short of 0-days, no one has access to locked iOS devices.