> I agree that there shouldn’t be a backdoor by default. But, for example, planting a modified app update with backdoor on the device of a suspected high-risk f

> I agree that there shouldn’t be a backdoor by default. But, for example, planting a modified app update with backdoor on the device of a suspected high-risk felon, based on a court warrant, is something that can be more reasonably debated. Sure. And on the flipside, given the many ways such a capability is a security risk and an abusable backdoor itself, it's something to develop additional technical safeguards against, such as Binary Transparency to verify that everyone's getting the same binaries.