This could be possible if at setup time the user was asked to create their own key, which any update would have to be signed with. This would then unburden Apple of having the &quot;master key&quot; needed to sign software updates, but would create an extra hoop for users to jump through to update their phone. I&#x27;m sure we&#x27;ve all experienced putting off a necessary update to software because of the inconvenience it would cause. Imagine millions of iPhones becoming vulnerable overnight because of mass user laziness.