Come on. It can be iOS update that waits until you enter the code or use touchID - and then sends the keys or decrypted data somewhere.