This made me wonder about cloud services or servers: would a border guard be smart enough (or care enough) to understand the difference between a device password and the password for an online account. If you just brought something that was a thin client, do you risk punishment for not providing additional login info? What worries me most about this kind of thing is being in a situation where some thug is asking you to do something that's either not possible, or clearly outside of the intent of the law, but you're at their mercy.

Re Australia, this is just the latest in a long list of many reasons I'll never go there. As someone else said, it will be interesting to see if tourism resumes or if most people will not risk trying to go their anymore given their recent behavior