I must be missing something here, what's to stop Appple encrypting the data partition..
... with full strength encryption using a key supplied by the device owner and not stored on the device? When the TLAs come callin' they can say 'Cannot help sorry"?