I'd be very curious to hear theories on how social engineering would apply here. The only path I've thought of is to target Apple employees for info on the firmware/iOS update process and/or get someone to sign your update with Apple's private key.