This seems to be a common question and I&#x27;ve seen it answered incorrectly a number of times.<p>The simple answer is that Apple has the key to sign software that will run on iPhone boot, AND Secure Enclave boot. Neither technically require the phone to be unlocked, and SE updates do not (currently) wipe secrets.<p>Lots of talk about 5c vs 5S onward phones, but Apple can remove bruteforce protections from all iPhones currently on the market.<p>The answer is B (though they can only update the software to remove bruteforce protections in this case).<p>(That said, I firmly believe that won&#x27;t be the case for long)