What about a different approach? A society does want to allow access to information for investigative purposes while protecting security. Then what about allowing court orders for companies to bypass security in their products with the caveat that the access method is made publicly reproducible.

This forces the company to fix the vulnerability and forces the government to carefully consider which cases are important enough.

Just brainstorming..... not a solid proposal. Shoot some holes in it please.