I am only concerned about the day than a NSL makes them push an update that backdoors or weakens security under the guise of something else.

would Apple be able to resist it? how would it become known they tried?