This forensic analysis of a Google Pixel 6a reveals that end-to-end encryption only secures data in transit, not on-device. Using forensic tools on unlocked phones can recover "deleted" messages from local databases. True privacy requires physical device security.