ensure their device is encrypted with a strong passcode

Why does this matter, if Australia will just force you to tell them what it is?