It is sort of both. It is attacking encryption by bypassing it (by demanding a plan-text copy of the data) and it is using our devices to act against our interest. I think both are pretty bad.