> you can't pull the keys out of the secure enclave.

You or I can't, but that doesn't mean Apple can't. They made that enclave, and put the keys in it in the first place.