> this article indicates JTAG over USB is disabled in production systems anyways

Well, should be. I bet there've been screwups now and then...