They usually confiscate it because we don't expect them to break the door down at 4 AM while we sleep in boxers. Thats how they usually get it. Till this day they haven't used keystrokes to steal someone's bitcoin from their phone it has always been socially engineered.