https://security.apple.com/blog/secure-exclaves/
"Isolation: data processed in Secure Exclaves must not be extractable or modifiable from the main OS."

Buuut is that really the case? What about hardware attacks?