I just don't understand the meaning of this, and thus I have a hard time not seeing malice in this. I manage RMA for consumer electronics, and we don't do any

I just don't understand the meaning of this, and thus I have a hard time not seeing malice in this. I manage RMA for consumer electronics, and we don't do any shit like that. We just have a factory test firmware that is signed by us, that can be booted from a USB storage, boots in RAM (so it doesn't need anything from local storage except first stage bootloader, and we disable secure enclave in first stage boot in that mode). It's still a bit of a security tradeoff since that gives attacker an extra surface area to execute code on Application Processor, but still nowhere near giving your password to strangers?