If you think they're bluffing about breaking the security, why not get someone (with a budget for this kind of thing) to buy the same phone, put in a secret message, set it to erase after 10 failures, and hire the same company to tell you the message. Either they can do it or they can't.

Consider this: 1) Someone creates false correspondence and intentionally sends it to whitehouse.org. The evidence is damning to the Bush administration. 2) Whitehouse.org passes it on to Palast 3) Palast publishes the damning e-mails. 4) Someone points out how something is not kosher in the e-mails. For example, some headers are obviously faked. 5) Now whitehouse.org is discredited, Palast is discredited, and the truth is blurred. It worked nicely when Dan Rather thought he had a scoop on Bush being AWOL from the National Guard and he ran with the story and was later discredited.