3 ms·

I don't know details about the upgrade process, so I can't answer, but this is really one question, not two: given 1 they can do everything, including 2.

• nodata 14y ago
  No it's not.
  • dchest 14y ago
    Yes, it is. Recovery key provides access to the encrypted volume in the same way as your password. There's no other way around: if something (password, recovery key, recovery certificate) can decrypt your volume, this something can also be used to change your password/recovery key/recovery certificate, which is not really important, because they already have access to decrypted volume. In the linked analysis, the authors "reduced" the security of FileVault 2 to the entropy of 120-bit recovery key.
    • nodata 14y ago
      The only time the recovery key matters is if Apple has taken it without permission. That doesn't seem to be the case. So we're talking about whether resetting an Apple ID will also reset a FileVault passphrase.
      • dchest 14y ago
        Resetting Apple ID won't reset a FileVault 2 passphrase. They are independent of each other.
        • nodata 14y ago
          So what's the issue here? If I use my Apple ID to reset my system user's password, how can Apple decrypt my disk?