A compromised device still can't access the secure enclave.
It doesn't need to, it just updates the code, you have the human publish.
It doesn't need to, it just updates the code, you have the human publish.