GrapheneOS without a PIN/Password configured or GrapheneOS but the Cellebrite tool owner knows the password to unlock the phone.

Basically the expected result for every device. They'd have data access without even having to use the tool in this circumstance. It's just convenience at that point.