Question for HN in general: Is it possible in principle (for Apple or someone else) to construct a smartphone that can accept software&#x2F;firmware updates, but that Apple cannot push malware to at some later time?<p>E.g. can we implement all security functionality in hardware&#x2F;burn it into the silicon? Or accomplish the same ends by some other means?<p>Intuition says &quot;no,&quot; because &quot;security functionality&quot; is sort of nebulous. But it would be great if a device could be constructed in such a way that all such future demands for collusion by hostile actors such as governments could be rendered preemptively impossible.