There's a lot of public documentation available that describes how those systems work. Even on Cellebrite's own website: For example on https://www.cellebrite.c

There's a lot of public documentation available that describes how those systems work. Even on Cellebrite's own website: For example on https://www.cellebrite.com/en/blog/android-acquisition-simplified/ https://www.cellebrite.com/en/blog/android-acquisition-simpl... and https://www.cellebrite.com/en/blog/iphone-extractions-5-questions-to-unlock-more-data/ https://www.cellebrite.com/en/blog/iphone-extractions-5-ques.... There are definitely some workarounds for encryption available. For example, it appears that even for some newer phones Cellebrite supports an approach of brute-forcing the PIN without locking the phone due to too many retries. But those workarounds don't seem to be the primary benefit / use-case of Cellebrite: It seems that in lots of cases people surrender their passwords when asked and the main benefit of Cellebrite is in extracting and presenting information from a phone once it's unlocked. Once unlocked data from iPhones is relatively easy to extract with a local backup. Android is much more limited in terms of which data is available as backup and the common approach appears to be to use ADB for extraction. Either by downgrading an application or by automated screen-scraping of the data (or by using exploits on outdated Android versions). For WhatsApp it appears that the "downgrade" approach might be used, which downgrades to an earlier version that makes extraction easier. That's the same approach that's also used by consumer backup tools such as Wondershare Dr.Fone. Regarding the more complicated approach to extract data from Android: Starting with Android 11 and API level 30 Android is starting to ignore the allowBackup manifest attribute, thereby allowing to locally extract data from applications via ADB even if the applications don't allow that (source: https://www.xda-developers.com/android-11-force-app-local-backup-restore-handicap-cloud-backup/ https://www.xda-developers.com/android-11-force-app-local-ba...). While definitely a benefit for users, I wonder if another motivation for that change was to simplify data extraction for law enforcement.