I wonder if you can use Spectre to steal signing keys from the device and jailbreak them. I guess they probably only have the public keys though, for verification.