Signal encryption relies on a password (last I used it, which was a long time ago). Typing long random passwords in a phone is nothing if not impractical.

It wouldn't shock me to find out they just brute forced the password.