This article leaves two billion-dollar market opportunities on the table: Online testing and multiplayer gaming^.
Apple’s recent announcement of a web authentication API includes if your system is booted in fully secure mode^ an attestation that the OS is in secure mode, crypto-signed by the secure kernel whose
own signature is by Apple.
This provides something that no desktop/laptop today can provide: certainty that the user isn’t tampering with the operating system to try and cheat. The entire stack, from hardware to UI, is signed and verified to have integrity, and modifying any component of the stack will result in the “secure” attestation being withheld. So instead of having to deal with insane anti-cheating spyware and kernel extensions and system monitoring, testing software and multiplayer game modes can simply require you to be in secure mode to login.
This is available today, immediately, if anyone were to implement it. Of course no one has yet, because no one is thinking of the iOS and macOS platforms as tamperproof computing for the Internet world, and so Apple’s quiet announcement of this in a technical API footnote has gone unnoticed.
Apple will probably always let you shut off anti-tampering on macOS with reboots and terminal commands, and then you can tamper to your heart’s content, but they will never allow your system to attest that it’s in tamperproof mode to third-parties, and that crypto signature can’t be spoofed since the Secure Enclave is involved in generating it.
This ‘tamperproof’ market opportunity is worth billions of dollars, and Apple made it there first. I can’t wait to see what happens when all the industries that suffer undetectable tampering today realize this.
^ Multiplayer FPS developers have had little incentive to develop for Metal prior to now, but Apple Silicon has the capability to easily unseat 5950X/GTX3090 as peak PC gaming performance for a tiny fraction of the cost and heat. Someday the Apple TV will get an Apple Silicon chip that can run FPS games using Metal at 4K/60/HDR, which should noticeably alter that cost-benefit equation.
^ I believe this is signed-sealed OS partition, SIP enabled, kernel extensions disabled; though I may have missed one or two bits.