They would have to encrypt it in such a way where even if Law Enforcement went to apple with a subpoena, they would not be able to hand over that data at a technical level.

The better way IMHO is use local models so data never actually leaves the device.