They spearfished a pc apparently.

And systems used by your TLA's to handle law enforcement access are not available to "any device on the internet"

As I said they should be set up to only talk over a private circuit to one other end point and also have proper hardware crypto gear that is external to the systems.

separating the extraction of data and applying the decoding probably should have been done on separate systems.