You could disregard the ’ios 7’ from the question.

I am asking about how data protection api would generally work if the passcode is disabled. It does not have to ios 7 specific.