A reported post-cutoff use of a mobile-extraction tool shows how quickly vendor policy can outrun vendor control once sensitive hardware is already in circulation.