This is covered on slide 46 of the original researchers presentation.

"Oh, and… there’s a bypass switch for pairing anyway"

--- Next Slide ---

"An electronic alternative to interdiction could be deployed by spoofing Apple’s certificates and configuring / pairing the device out of the box."

 "OR by penetrating a targeted organization, supervisor records can be used to pair with and access any device they’re supervising."