> A backdoor that requires physical access isn't a backdoor. If an attacker has such access, you're already screwed

so why did the original "load an unsigned debug build" functionality require cryptography rather than just, say, holding down the volume button during boot? Because it's not nearly as simple as "I have the hardware, I can do anything".