A lot of assumptions here.
Still it's an Apple system, so 'cain & able' which I'm told is popular with plod for inserting data, with selected write to disk dates as required, onto windoze drives, won't have been able to have been used to write incriminating files 'in the clear' to secure a persecution. And you thought only the NSA had backdoors..