Apple could write code that checks the hardware ID supplied and sign only that version. It&#x27;s been sufficient to prevent hacking so far and is the major protection relied upon until the latest generation, so I don&#x27;t think this is an issue at all.