He had a duress password, and told it to a border agent (who had no warrant, but that is no longer legally required for border checks), which then wiped his phone.

He was targeted for being part of the Stop Cop City protest movement (and they were likely looking for contacts), and now the feds are claiming that because he could have had anything, he should be allowed to be charged with possession of whatever they can think of (I.e. they already tried to claim in a press conference that he may have had CSAM, because they couldn’t search it to prove he didn’t).

Which they, as the governments, can choose to legally treat as the same thing. “You are guilty of whatever someone does with your account” is not a new concept, it’s just one that most places have chosen to reject. It can always be overridden, such as for the Palestine Exception.