I'm surprised that the AFP has trouble breaking into a Samsung/Android phone. I know little of the smartphone environment, let alone their security precautions,

I'm surprised that the AFP has trouble breaking into a Samsung/Android phone. I know little of the smartphone environment, let alone their security precautions, but I was always under the impression, that there's software readily available on the black market/dark web that turns breaking into a phone into something of a point-and-click adventure? ...or is this actually about making that information "legal" in the eyes of the court?