Even if we get people to shift to privacy respecting or encrypted apps, the problem still stands. They could just ask you to give access to those services. If you don't, it would come with its own legal challenges.

Section 247(1)(ii)–(iii) mandates individuals and businesses to disclose passwords or encryption keys and permits officers to “override the access control” of any device or account. If you don’t hand over your phone passcode or email password on demand, officials can hack into the device. Any refusal is now explicitly punishable as non-compliance.

End-to-end encrypted messaging services like WhatsApp or Signal could be forced open during a tax raid.

Solving the issue would need to come from challenging the act itself.