I’m sure Apple over-engineered the security of this to prevent this from becoming a vector for jailbreaking.

As a nice side effect, I would trust it.

Plus the people you would get firmware from like this would be your family/friends/coworkers or maybe an Apple Store employee if you really don’t know anyone else with an iPhone.