Trust isn&#x27;t binary, and verification does not require <i>individual</i> verification, but <i>community</i> or <i>ecosystem</i> verification.<p>If 3rd parties can audit software (including analysis of binary-only software), and can observe the software&#x27;s behavior, and can watch the software&#x27;s network traffic, then the chance of being caught violating user trust will generally be high enough to make the liability of being caught a genuine concern.<p><i>However</i>, if updates are automatic, encrypted, and platform DRM prevents 3rd-party audit&#x2F;analysis, the chance of being caught starts to dwindle down towards zero. That entire trust ecosystem disappears, and what we&#x27;re left with is absolute trust in a corruptible third party, and no mechanism with which to verify.<p>The latter is exactly what Apple has built. They have a backdoor: the means to push absolutely trusted software while preventing all third-party audit and analysis.