The U.S.A.'s weak privacy protections aren't the entire world, you know.

In the E.U., and other places, companies are definitely held to stricter standards as to what extent they can search a private device, even if they claim the o.s. is only a service.