[lxgr]

Even in a criminal matter, wouldn't Apple's description of their systems and services matter quite a lot on how that would go?

[turquoisevar]

Apple would only have to report it, similar to how you report a regular trespass and provide some evidence like logs.

Maybe, if LE is unable to connect the dots, explain how it was done so the prosecution can explain it well.

But it’s significantly less intrusive than a civil case where a lot of discovery is involved.