They should just tie it to Activation Lock. Make AST 2 (or whatever it is now) available to the public, and allow pairing any component (new or pulled from an old device) as long as it's not already paired to an Activation Locked device.