[embolism]

Then you haven't explained how Apple could join another device to the encryption session without the user's password.