Only the owner's Google account is accepted; any other is refused before a session exists. Then one passkey prompt, Touch ID or Face ID, which also holds the key to the contents.

Not released: synthetic data only.