> There are ways to implement this without the need to do per-device pairing, but doing so in a secure way is quite difficult.
Is this based on first-hand knowledge? I'm skeptical on both fronts because I neither see any evidence this is what's being combatted, nor do I see the technical difficulty of being able to self-authorize your phone's parts to be used in repairs.
Sure it takes some engineering effort to get there, but I wouldn't expect it to be particularly challenging from a technical point of view. The phone is already linked to a user account, and the phone's parts are apparently already linked to the phone that's currently using them.