On: In internal memo, Apple addresses concerns around ...

[shuckles]

Not really. Key management is done by the SEP, which can’t be introspected. And again, database updates take an iOS update so the back door threat is the exact same.

[Hackbraten → shuckles]

> database updates take an iOS update

macOS already supports silent database updates, for example for Gatekeeper and MRT signatures.

Why wouldn’t Apple use this feature on iOS, too?

[shuckles → Hackbraten]

Because it’s bad for privacy.

[Hackbraten → shuckles]

What do you mean by that?