@bruienne has some thoughts on this as well. we’ve been discussing apple’s chip for generating un-exportable private keys on each device