> Unless you explicitly enable Advanced Protection mode for all your devices

This is very easy though, you just go to your iCloud account settings under the settings app and enable it. It should be on by default imo, but I understand the argument for why it isn't.

Either way, enabling it is not a barrier and ICE cannot be granted access once you do unless you yourself give them that access.