The Secure Enclave is not well-audited in the traditional sense, as it’s just as proprietary as the rest of the device.