Third parties can&#x27;t do anything because iPhones accept software only if signed by Apple. So Apple is the only one that can create a software that lower its protection level to allow for bruteforce.<p>And Apple can&#x27;t decrypt the phone: it can remove the bruteforce counter and&#x2F;or exponential delay, both of which are paramount parts of the security architecture that requires users to be able to unlock the phone using a 6-digit code (4-digits for non Touch ID phones like that in discussion), which in turn is an important UX compromise to allow to reach the goal of having 90% of 1B iOS devices with passcode lock activated.<p>Allowing for a remote bruteforce is basically undermining the whole security architecture.<p>To make a phone that is not bruteforcable, you need to give up on the 6-digit concept, which is already an option (I turned it on on my phone) but it&#x27;s strongly unlikely to gain widespread acceptance