It depends on the country it is in, it rejects the US government's request. But it fully complies with any request from the Chinese government
My mental model was that Apple provides backdoor decryption keys to China in advance for devices sold in China/Chinese iCloud accounts, but that they cannot/will not bypass device encryption for China for devices sold outside of the country/foreign iCloud accounts.