You'd get stuck at the same place as the author, at the kernel driver/module level. Chrooting to a Mac image wouldn't load the needed IOKit modules, although I'

You'd get stuck at the same place as the author, at the kernel driver/module level. Chrooting to a Mac image wouldn't load the needed IOKit modules, although I'm not familiar enough with Darwin/OSX/iOS to say if you could load said modules with a jailbreak. My understanding is modern/recent jailbreaks only allow running unsigned code, not full kernel access.