Apple's T2 custom secure boot chip is not only insecure, it cannot be fixed without replacing the silicon.