What changes with your analysis with the understanding that apple holds the signing keys for the PCC nodes? How does the client verify that the code running on

What changes with your analysis with the understanding that apple holds the signing keys for the PCC nodes? How does the client verify that the code running on the PCC is the code that has been audited publicly, and not a modified version logging your data or using it for other purposes(signed by apple).