>that's inherent to the device
It's not inherit to the device. Accepting updates signed by a specific key is inherit to the device.