Wireless in-box iPhone updates… This seems unlikely to be abused….

So if iPhones can be updated wirelessly while new in box, what’s stopping a malicious actor from figuring out how to do it as well? Presumably such a system would require a well-protected encryption key, but that could be leaked or otherwise found (or legally requested in jurisdictions where the state requires full compliance like Russia or China). Perhaps it would only work on phones that haven’t yet been associated with an iCloud account, but that doesn’t protect them before …

actor box can encryption found iphone iphones key leaked malicious privacy system updates wireless