> The fact is that there is an absolutely enormous (and growing) amount of value in a fully trusted hardware stack. Apple has taken a lot of flack from "right t

> The fact is that there is an absolutely enormous (and growing) amount of value in a fully trusted hardware stack. Apple has taken a lot of flack from "right to repair" over issues like not being able to "repair" the Touch ID, but I haven't seen any great answers over how to allow any random 3rd party to repair Touch ID without also meaning any random malicious 3rd party (including legitimate repair shops in some scenarios) could replace it with something hostile too. A trusted hardware stack isn't one that's been locked down by a company, it's one I can modify and control. In short, I trust that Apple will control any hardware I buy from them, and I trust Apple will always work in Apple's best interests. I cannot trust that Apple's best interests will always align with my own. I cannot trust that Apple's best interests currently align with my own. > I think a well crafted system might be able to square this via dual chains that an owner could pick on purchase and appropriate manufacturer liability mitigations. So for example you could choose "only Apple may ever modify the trusted core of this device" or "anyone with the key can" and in each case Apple would utilize a separate root private key. Only if I could revoke the manufacturer's ability to modify my hardware. > In the latter case Apple would also be relieved of all liability for any damage ever done due to a 3rd party Touch ID repair This is obvious. I agree with the rest of your post.