I agree with all the ideas in the article, but at a bare minimum, Apple should configure devices so that no firmware update can be installed unless the user enters their PIN first.  This would be an easy move that would make this whole debate moot.  The problem is that Apple only partially protected users from Apple itself.