A compromised device still can't access the secure enclave.

It doesn't need to, it just updates the code, you have the human publish.