No responsible disclosure needed. The method of gaining access to this key is on-device, not on a server, so so patching would only prevent future use while a d

No responsible disclosure needed. The method of gaining access to this key is on-device, not on a server, so so patching would only prevent future use while a device remaining on the firmware which allowed decryption could continue to decrypt the SEP firmware for all future revisions on existing hardware. I don't see why xerub would release the method for this yet, unless it is now burned/useless.