Ask marcan for more info :) but IIRC Apple's secure element does not do anything by itself and is behind an IOMMU.