When that was discussed on HN, the consensus seemed to be that Cellebrite had found a way to allow brute forcing passcodes, but that they would be ineffective against a good password.