What's the latest case law on this? I thought it was still unsettled, and there were a lot of confusing edge cases. E.g. https://www.inc.com/will-yakowicz/smartphone-passwords-const...