There are forensic tools that can probably bypass those. I don’t think the agent is just going through your phone by using the phone itself, though maybe it is that stupid, idk.