The validation is done outside the CPU I believe too, that’s certainly what happens with the fingerprint reader. I think the process is documented in the secure enclave white paper