As I understand it, Secure Enclave firmware is just a signed blob of code on main flash storage that&#x27;s updated along with the rest of iOS, which can be done via DFU without pin entry. I assume DFU updates are very low level, with no knowledge of the Secure Enclave or ability to prompt the user to enter their pin.<p>Making the DFU update path more complex increases the risk of bugs and thus the risk of permanently bricking phones.<p>You could imagine an alternative where on boot the Secure Enclave runs some code from ROM which checks that a hash of the SE firmware matches a previously signed hash, which is only updated by the Secure Enclave if the user entered their pin during the update. If it doesn&#x27;t match, either wipe the device or don&#x27;t boot until the previous firmware is restored.<p>This way Secure Enclave firmware updates and updates via DFU are still possible, but not together without wiping the device.