how?
Whats been hinted at the guardian is the Adoption of a front door. Ie pre encryption of sent message.
Im guessing this would entail a manufacturer device enabled cache on the SOC. So the Gov in question can simply request a key from the manufacturer based on the serial number of the device.
This will be real.