This simply isn't true.

if (deviceUid = 12345) { openBackDoor() }

Cryptographically sign code. Done. We know it's secure and will only work on devicd 12345 because we trust cryptography.