But keychain itself is encrypted . I thought it was stored in secure vault too. Anyways, how does finding a kernel issue, let them subvert a hardware based decr

But keychain itself is encrypted . I thought it was stored in secure vault too. Anyways, how does finding a kernel issue, let them subvert a hardware based decryption mechanism, like face-id or thumbprint