Botnets create traffic from trusted devices. Would the icloud token provider un-trust compromised devices? Sounds like a nightmare.