Playing Devil's Advocate, couldn't the company require something signed with their private key to open the back door?

Apple (for example) would already be in serious trouble is someone got their private keys, they use them to sign OS updates for example. If they could generate a device-specific signed cookie to say "open up", what harm would that do?