Saurik is correct about security through obscurity not really being helpful, but for what it is worth, this: > Countermeasure would be to have separate keys, i

Saurik is correct about security through obscurity not really being helpful, but for what it is worth, this: > Countermeasure would be to have separate keys, ideally for each such phone, but having them for only this class of phones might be sufficient, too, if they also restrict access to this class of phones. I think that's technically easy, but may be expensive, process wise. ...is already something Apple does with the special development devices. Different keys and certificates used, probably to allow easier access for engineers while tightly monitoring and auditing production infrastructure.