[ec109685]

They can still write software to insert themselves into the key exchange flow and eavesdrop on a conversation. E.g. I don’t believe there is anything stopping Apple from pretending a participant bought a new device.

[thebean11]

That's a much less scary attack vector though, since they would also need to somehow impersonate the participants voice or image right?

[upofadown]

Think of it as aiming a phone at another phone. Apple would decrypt everything and then reencrypt it.

[xtian]

How would they spoof the 2FA from an existing device?