They could have&#x2F;should have circumvented all this by not allowing firmware to be forced onto a locked phone without it wiping its own key store.<p>Admittedly users could also solve the issue for themselves by using much longer passwords instead of short passcodes.