That guarantee until the latest generation was the only thing protecting the hardware. It has never been altered or hacked that I am aware of. Doing so would require modifying the physical construction of the chips on the device.

Possible? Maybe, but if it was that simple the FBI could simply change the signing key. It's not, and they can't.