I think this move shows that Apple is serious about security. They previously assessed the risk of a government ordered backdoor low and the potential for bugs in the Secure Enclave higher, and hence made the trade off the allow signed updates.