Cellebrite won't sell that thing to most police forces (they might sell the service to them, in a way where they don't get their hands on the actual exploits),

Cellebrite won't sell that thing to most police forces (they might sell the service to them, in a way where they don't get their hands on the actual exploits), so I'd assert that it is tricky for Apple to get this. This is also supported by the fact that Apple has systematically not been able to timely patch the vulnerabilities used by Cellebrite.