Because governments and forensic companies buy their tools. "Completely outdated" you may say - but most people still don't use these things. Most people won't

Because governments and forensic companies buy their tools. "Completely outdated" you may say - but most people still don't use these things. Most people won't go out of their way to take anything more than the most basic security measures. So that's good enough most of the time for forensic purposes. Apple's "secure by default" concept sounds like the best practice in theory, but their backups and account tying of devices make it so that there's easy attack vectors for tools like this. In order to fully take advantage, you'd have to have never taken a backup of your iOS device and have all iCloud features disabled. Most people don't do that, most people would rather get their data back if they forget their password than keep them private in an extreme situation - for most people that probably makes sense.