But Apple is only able to do anything at all because it's an old phone without security features present in later models.
Also, any other manufacturers' phones would be trivially hacked in the same case, because the firmware can be overwritten without needing to be signed. Apple is pretty much the only one that requires signing.
There's the irony in this situation.
The reason nation states actually purchase iPhones is BECAUSE of the security they provide.