[lxgr]

But only Apple devices can be managed, and presumably that’s in turn attested to by Apple cryptographic keys in hardware?