&gt;If the Secure Enclave can be updated on a locked phone, all they need to do is stop allowing that, right?<p>That probably also means removing most debugging connections from the physical chip, and making extra sure you can&#x27;t modify secure enclave memory even if you desolder the phone.