Well, somewhat. They’re doing a clever side channel based on the SEP’s RNG to panic the device when booting from DFU, but this has already been bypassed on older devices via a bug in SEPROM. I believe they already have code execution in the A11’s enclave as well, but that one has some sort of replay protection that complicates matters.
