>that's inherent to the device

It's not inherit to the device. Accepting updates signed by a specific key is inherit to the device.