Isn't apple also a "single party that has the signing keys to run any software..." ?