> If someone has your iPhone AND you are stupid enough to set a guessable password, Ever hear of telephoto lenses? Ever hear of coercion (and, yes, it IS possi

> If someone has your iPhone AND you are stupid enough to set a guessable password, Ever hear of telephoto lenses? Ever hear of coercion (and, yes, it IS possible to guard against coercion, for example by introducing delays or requiring a third party to be involved in some actions)? Ever hear of good old fashioned sneakiness? ANY password that's used on a regular basis is relatively easy to compromise. Furthermore, a phone is a convenience device. It NEEDS to be simple to unlock your phone, or it is useless. A "strong unlock password" is a bad fit for actual use of the phone. Therefore, it's stupid to design a system that makes the mere ability to unlock your phone into something that can take over other devices or cloud services. A phone should NOT be a "trusted device" in the sense that it can do anything major to anything other than itself. It also should not put especially high-stakes assets, on or off of the phone itself, at risk based on a mere unlock. Any system architecture that violates either of those is a shitty, lazy system architecture. > then that's YOUR problem, not Apple's. Yes, by being stupid enough to use an Apple device, and thereby subjecting myself to Apple's brain-dead design, I would indeed create a problem for myself. Good thing I have the luxury of not doing that. I mean, I'm also not dumb enough to store my only copies of anything important in any cloud service. But that doesn't make it not Apple's problem if Apple's own cloud service is insecure. > The point is that with the Secure Enclave, Apple are able to rely on the iPhone being a "Trusted Device" to enable you to reset the Recovery Key. It is up to YOU to respect the "Trusted Device" status and (a) secure the device accordingly and (b) remove said device from your Apple account as soon as it is no longer in your possession. If a device is to be "trusted", then it needs to be TRUSTWORTHY, which means that it needs to not cause havoc without reasonable authentication. By locking you out of your cloud account without anything more than a screen unlock PIN, the phone is abusing the trust placed in it. It is also stupid to put unlimited trust in anything anyway, especially complicated, bug-prone things like "Secure Enclaves" and phone operating systems.