That's a good point about the private key never even touching a network. Here's a thought: if the crack firmware does leak, and Apple becomes aware of it, coul

That's a good point about the private key never even touching a network. Here's a thought: if the crack firmware does leak, and Apple becomes aware of it, could they just push out an OS update that rotates the signing key? That should effectively disable it, once updated. What I'm getting at is this seems more about resisting government abuse / repressive regimes than technical infeasibility of limiting it to authorized users.