Source? Current discussions surrounding your statement point to it being false - that Apple can update the firmware of the secure enclave without it wiping out it's data.
Do you have the source for that, too? I was still under the impression that the Secure Enclave would erase the keys if it's updated.
It's a pretty huge flaw if the firmware can be updated and the keys preserved without first validating with the passcode.