&gt; it&#x27;s not unthinkable that with more details, 3rd parties could figure out how to get in too.<p>This sounds like a misunderstanding. No clever third parties are going to find a way to break code signing. To exploit the security hole <i>Apple already created</i> would require having Apple&#x27;s signing certificate so that a phone could install the code. If it wasn&#x27;t for the certificate, it would be quite a bit more trivial to hack a firmware to do a malicious thing and install it on any phone.