One of the technical details is that disjunctive claims are true if any of their constituent elements are true. My claim was of the form, "The iPhone is vulnerable to attack. Here is one attack. If that doesn't work, here's a second attack." The first attack doesn't work, but the second one does. Hence the overall claim -- that the iPhone is vulnerable -- was (and remains) correct.

So should you be flagged to death because you got this wrong?

The second attack was added in an update after you were criticised, no? It hardly counts.

No, it was in the original post.

" they could use a copy of the chip to try five different PIN codes, and then replace the chip with a fresh copy of the original and try five more. Lather, rinse, repeat. At worst this would take about a week or so."