Well if that other place is having to have the device in physical possession, and having to enter the admin password in person, before you can e.g. replace the

Well if that other place is having to have the device in physical possession, and having to enter the admin password in person, before you can e.g. replace the kernel or critical system libraries... https://help.apple.com/pdf/security/en_US/apple-platform-security-guide.pdf https://help.apple.com/pdf/security/en_US/apple-platform-sec...