The repository included the private portion of the platform key in encrypted form. The encrypted file, however, was protected by a four-character password,

How do you fuck up this badly?

This is so incredibly stupid.

good. they can’t lock our devices down that way.

use full disk encryption backed by a strong password if you want security.