Mostly because they would need Apple source code and toolchain, too, and dozens of coders willing to make evil updates. Of course they could get those, too. But imagine what an expensive botch some "security contractor" would make of the project of crafting evil updates for the FBI. They would probably be found out and publicly humiliated, and there would be a terrible trust hit to the whole tech industry.