> No, they can't. A quick update to recent hardware practices: modern SoCs like Apple's have something called "Secure Enclave Processor" that's on-die.

Yes, they can. The particular phone in question is from before the Secure Enclave Processor