I understand how it works but you said we can't trust anyone with magic software. I assume you count secret keys as part of that magic software. Apple has such

I understand how it works but you said we can't trust anyone with magic software. I assume you count secret keys as part of that magic software. Apple has such software and keys, so we can't trust Apple. Perhaps you really meant "we can't trust anyone except Apple, Microsoft, Google, Samsung, Lenovo, etc."? If you don't count secret keys, then are you happy for governments to have their own OS update keys and use their own servers that are quietly accessed by devices? That's not quite applicable to this story though which seems to be just observing network traffic.