Well, you're pretty close here. Yes, the iPhone has the best secure enclave. However, there is nothing stopping Apple from making separate builds with extra "

Well, you're pretty close here. Yes, the iPhone has the best secure enclave. However, there is nothing stopping Apple from making separate builds with extra "features" for the Chinese market, and installing them. Same keys, OS version chosen by region. Boom. Chinese version acceptable to Chinese government, rest of the world secure. Easy. From my experience in this area, I would expect the Ministry of Industry and Information Technology to accept nothing less.