There's a couple overlapping things here:

1. Apple can and does comply with subpoenas for user information that it has access to. This includes tons of data from your phone unless you're enrolled in Advanced Data Protection, because Apple stores your data encrypted at rest but retains the ability to decrypt it so that users who lose their device/credentials can still restore their data.

2. Apple has refused on multiple occasions, publicly, to take advantage of their position in the supply chain to insert malicious code that expands the data they have access to. This would be things like shipping an updated iOS that lets them fetch end-to-end encrypted data off of a suspect's device.

> Apple can and does comply with subpoenas for user information that it has access to.

When we are talking about data stored on a company server, you have no choice when you are served a valid warrant.

That's why Apple went all in on the concept of keeping sensitive data off their servers as much as possible.

For instance, Apple Maps never stored the driving routes you take on Apple's servers, but does remember them on your device.

Not to mention, while apple will publically deny it, there are government agents working undercover at every major tech firm. They may or may not know. They certainly exist.