Why? If one can only upgrade the OS with a package signed by Apple, why couldn&#x27;t it check for a second signature, generated from the user&#x27;s password? Then you could upgrade the OS, you&#x27;d just need the user&#x27;s password.