How about the threat of a 3rd party _adding_ information to a device? That sounds like another threat if someone wants to frame a suspect (i.e. another reason why devices should be placed in Faraday bags)
Interesting, if I were an attorney I would try to argue that chain of custody is broken if the device is still accepting remote commands. I wonder if it would work in court?