[iansinnott]

I don't see why granting access to an app would grant full access to the whole thing. I.e. similar to how apps don't get full filesystem access. I also know nothing about how it's implemented though.

[klausa]

This comment, with the last sentence of it, deserves to be encased and shown in museums as the archetypical HN comment.

[Dah00n]

The commentator seems to understand enough. The secure enclave is still secure no matter what is using it. That's the whole point of it.