Governments can order the company to push out a new client that turns off decryption for that user, or give them metadata logs (which encryption doesn't help for). Both legal and cryptographic strategies have to be used together.