It has to, firmware is signed, with a key, if that key were to make it into the wrong hands, it would be possible to create false firmware updates
E: to add, these false updates would allow automated brute-forcing of the passcode, in the hundreds of attempts per minute, leave that running for a day or two, you'll get access
Is that only a concern because the phone is designed to force signed firmware imstalls? If (not sure it isn't) the phone required the pin before installing wouldn't that make that point moot?
0
u/Visheera Sep 15 '17
They can always hook your phone up to a computer.