But if the data is encrypted in the drive they can't either, unless the tech company has deployed a backdoor in their trusted software stack. In this scenario

But if the data is encrypted in the drive they can't either, unless the tech company has deployed a backdoor in their trusted software stack. In this scenario you're somewhat more protected, because the attack vector is just the vendor backdoor rather than the panoply of RCE infesting modern systems, and one would hope that access to the backdoor is closely regulated by laws and judicial oversight. It all goes out of the window (pun intended) when your foe is a soverein actor but let's be honest, all we really want is a decent lock for our front-door.