Are you sure or is this a guess? The article doesn't mention what technique is used (as opposed to e.g. coercion to reveal passnumbers or just collecting data from unencrypted devices).

Attacking a device should be illegal without a warrant.

I hope this is it and not hidden backdoors for the law enforcement agencies.