The reference image isn't linked to any particular iPhone or person It is for Apple, to the extend that if there are backdoors and weaknesses in their PCC, the

The reference image isn't linked to any particular iPhone or person It is for Apple, to the extend that if there are backdoors and weaknesses in their PCC, they could register a device signing identity to Apple signature mapping. I think the line of reasoning is that you have to trust Apple anyway, since they could also roll out a malicious image to your particular phone, but I still feel like PCC is much harder to verify/audit than an iPhone already is.