Who knows what that code blob is really doing? It's cop spyware. Sometimes cops plant evidence. Maybe courts shouldn't trust it.

In principle, the OS environment could be made independently auditable - keeping undeleteable signed logs.