Seems like it'd be a pretty huge oversight if that vector were open, but I agree with you that it's not very confidence-inspiring if nothing about this is out there.
Depends on your threat model. It's possible that the Secure Enclave was just intended to be a defense in depth against malware and common criminals, not something that could keep Apple themselves out. If so, I'm sure they're re-evaluating that now.
