Sorry, perhaps I was a bit too pithy in the way I phrased that. I wasn't trying to call into question the certifications, as they were conducted, at the time they were conducted, or implying their scope would change. What I was (perhaps too snarkily) trying to point out is that by unifying—vertically integrating—a previously independent MDM provider with the company that provides the MDM platform, that the promise "we are committed to operating our business in compliance with these standards every year going forward" is highly questionable at this point, unless Apple is committed to maintaining Fleetsmith's independence. Perhaps I should loosen my point even further by asking: how many more papers like https://i.blackhat.com/us-18/Thu-August-9/us-18-Endahl-A-Dee... should we expect Mr. Endahl to be releasing in the future?