It's very difficult, especially since they aren't open source. However, they could attain a state where to compromise a device requires the user accepting a mal

It's very difficult, especially since they aren't open source. However, they could attain a state where to compromise a device requires the user accepting a malicious update, which would make the FBI's current request moot. (although there's a whole separate set of legal attacks unexplored)