Apple has long positioned itself as a guardian of user privacy and device security. Yet code buried in the beta for iOS 27 reveals a new Restricted Mode. This one serves a different master: unpaid bills.
Discovered this week, the feature would let Apple throttle a financed iPhone. Miss payments under the forthcoming Apple Upgrade leasing program and the device slips into a stripped-down state. Phone calls still work. So does Settings and the App Store. Nearly everything else goes dark. The Verge reported the discovery on Tuesday, drawing from earlier analysis by 9to5Mac and Bloomberg.
But don’t confuse this with Lockdown Mode. That older tool, introduced in 2022, fights sophisticated spyware aimed at journalists, activists and dissidents. The new Restricted Mode targets consumers who fall behind on lease payments. And it arrives at a moment when Apple touts unprecedented success against mercenary hacking tools.
TechCrunch broke the news in March. Apple spokesperson Sarah O’Rourke stated flatly, “We are not aware of any successful mercenary spyware attacks against a Lockdown Mode-enabled Apple device.” The claim echoed one made in 2023. Researchers back it up. Amnesty International’s Donncha Ó Cearbhaill told the outlet his team had seen no evidence of compromise when the mode was active. Citizen Lab documented cases where NSO Group’s Pegasus and Intellexa’s Predator spyware simply failed or bailed out upon detecting the restrictions.
Security researcher Patrick Wardle called Lockdown Mode one of the most aggressive consumer-facing hardening features ever shipped. It shrinks the attack surface. It blocks message attachments from unknown senders. It disables certain web fonts, link previews and 2G cellular fallback. FaceTime calls from strangers? Blocked unless the recipient initiated contact within the past month. The trade-offs feel immediate. Web browsing slows. Some apps break. Yet for those facing state-level threats the protection justifies the pain.
The New York Times Wirecutter updated its iPhone security guide in June. Davis Erin Anderson of the Freedom of the Press Foundation explained the value for high-risk users. “You can see what a pain it would be to hack you because you have to go through those steps every day.” She recommends turning on Lockdown Mode during travel or when specific dangers appear. Not for daily use by most people. Luis Corrons from Gen Digital echoed the caution. Valuable. But understand the side effects.
Apple also pairs Lockdown Mode with other defenses. The Mac Observer outlined changes in iOS 26. Background Security Improvements install automatically. Memory Integrity Enforcement adds another layer. When enabled, Lockdown Mode applies to paired Apple Watches too. Users can whitelist specific Safari sites or exempt certain apps. Still, plain-text messages arrive. Attachments do not.
These tools matter because spyware remains a live threat. TechCrunch has tracked campaigns from NSO, Paragon Solutions and Intellexa. Some target criminals. Others hit political figures. In every documented case where Lockdown Mode was active the attack failed. Google researchers observed spyware aborting upon detection. The mode forces attackers to develop more expensive, complex exploits. That raises the bar.
Yet the new Restricted Mode in iOS 27 points in another direction. It uses a system called App Managed Features. Financing partners can check device status without gaining location data. A Partner Finance Lock, tied into Find My, prevents users from erasing the phone, selling it or stripping parts for resale. The goal is straightforward. Protect the lender’s interest when payments lapse.
Recent X posts show users already discussing the implications. One account highlighted how USB Restricted Mode, a separate longstanding feature, limits physical forensic access after an hour of inactivity. Another noted Activation Lock extensions that reduce functionality of harvested components from locked devices. The conversation mixes security, finance and consumer frustration.
Apple has not commented publicly on the iOS 27 code. Beta software changes often. The feature could soften or vanish before public release. Still, its existence signals a broader shift. The company that once refused to unlock iPhones for the FBI now builds mechanisms to lock down devices for its own financing partners.
Security experts see both modes as part of the same philosophy. Reduce unnecessary exposure. But the motivations differ sharply. Lockdown Mode empowers the vulnerable. The payment-linked Restricted Mode protects corporate balance sheets. Consumers may soon face a choice when upgrading. Accept the lease terms or pay full price to avoid potential restrictions.
Wirecutter’s Anderson also stressed keeping sensitive data out of iCloud when possible. Enable Advanced Data Protection. Use strong passcodes. Restart devices regularly. These habits compound the protections offered by both modes. Yet no single setting replaces vigilance.
As iOS 27 moves closer to release the industry will watch how Apple balances these tools. Spyware defense has proven effective. The new finance enforcement system remains untested in the wild. Its activation could spark backlash from users who view their phones as fully owned once purchased. Or it could quietly deter defaults and keep upgrade programs affordable.
Either way the code in iOS 27 makes one thing clear. Apple continues to tighten control over what its devices can and cannot do. Sometimes that control serves privacy. Sometimes it serves the ledger. The distinction matters.
WebProNews is an iEntry Publication