> unless the rate limiting is hardware controlled

I think this is the case on newer iPhones. But it might be flawed somehow given how Cellebrite were still able to brute-force?