Could Apple alter the icloud account in question such that a login succeeds with any password or session key? I wonder if there is some variant of that which would allow the remote backup strategy to work.
I imagine the issue is that the iPhone has non-backed up information on it. From what I've read Apple has already turned over the latest backup from ~6 weeks before the shooting. Getting a current backup would require the phone's hardware to cooperate.