A ruling from an appeals court judge has raised questions about privacy, device security, and how law enforcement conducts investigations