You still have to trust the app to use the secure enclave and not generate the key in standard code.
Re:Android 10
by dkonofalski on Monday September 09, 2019 @11:44AM
(#20919208)
iMessage does that, though. This has been verified by the jailbreak community and the netsec community.
Are you sure about that? I was under the impression that, according to the security white paper released by Apple, that the key is generated on-device in the Secure Enclave and that Apple never has access to it. The Enclave itself also doesn't have network access so there's no way for that to be transmitted anywhere by any other means except for physical access, which is also limited in the hardware.