If Apple turned an investigation team onto the app and pointed all forensics at it, I could see reason for wanting to collect data before shutting it down.

Not that Apple is in the position to put someone under arrest, but I believe LE investigations sometimes allow suspects to walk free in order to observe and collect additional evidence.