> ...without actively changing the code so that you start trusting a new key.

Yes but the problem is there's nothing stopping them from doing that. If Apple/Meta rely on the argument that they technically cannot read people's messages then they will eventually lose because it's simply not true.