I could imagine that if it's infeasible to to break into the device to see how it's cracking the iPhone, then Apple could opt into setting up a dummy phone, then sniffing all the communications with the device to get an approximate idea for how it works.