There is now a way for security researchers to gain (legal) access to unlocked iPhone test devices which do not have the usual protections surrounding arbitrary code execution and other defences.
Access to ‘rooted’ hardware enables security researchers to inspect core parts of the operating system more easily, which helps to track down exploits in the kernel and other low-level areas of the iOS operating system.
Apple announced its plans to do this almost a year ago.
Researchers can apply to get this
special hardware here. As you might expect, Apple will only let applicants who have a previous history of tracking down security bugs in its platforms apply.
Naturally, the test devices remain the property of Apple and are leased on a rolling twelve-month basis. Apple suggests that there is a limited quantity of these devices available, so not everyone who applies this year will get one. But applications will automatically roll over for possible eligibility in 2021.