To the degree that they can do it, they can only do that because they own both the hardware and the software, and they are tightly integrated. You need hardwar

To the degree that they can do it, they can only do that because they own both the hardware and the software, and they are tightly integrated. You need hardware that can securely hold secrets; you need software to detect tampering and tell the hardware about it; you need software that the hardware trusts to communicate with apple servers. Without the whole integrated pipeline from local secrets cache to apple servers, protected because it's all owned and managed by the same secret-keeper, what apple does can't be done.