[amaccuish]

Yes, Apple literally doesn't have access to the keys if they do nothing. If they do something, they have very easy access to the keys.

[zepto]

That’s true in principle in every case where the software can be remotely updated.

However in practice, making public statements like this and breaking them would have enormous reputational costs.

Apple has put up a bigger stake on the truth of their encryption story than anyone else.