[shuckles]

Since Apple operates the key service and there is no key transparency mechanism, they could certainly do it (technically) with only a server side change.