They could involve third parties in signing updates and if a device receives an update that isn&#x27;t disseminated to all third parties it doesn&#x27;t accept it. That way apple couldn&#x27;t dispatch custom&#x2F;backdoored updates to individual devices without revealing that they did it.