> Maybe even with swapping one to another in a hard way (for example requiring resetting full phone and re-linking it again - so it cannot be casually by convin

> Maybe even with swapping one to another in a hard way (for example requiring resetting full phone and re-linking it again - so it cannot be casually by convincing someone to). This is the idea I've liked the most, require plugging into Apple Configurator or Xcode to put the device into developer "beware all ye who enter here" mode which forces a wipe. I've never heard of anyone casually unlocking their bootloader on Android, which requires a similar process. You'd lose most people once you said "plug it into a computer", and everyone who isn't a dev once you said "wipe the phone".