Smartphone repair woes clash with EU rules, Apple fixes
Photo by Mikhail Nilov on Pexels
EU repairability rules meet industry inertia
A Register analysis published on September 7, 2026 shows that the majority of flagship smartphones still fail to meet the European Union’s repairability requirements introduced last year. The report notes that manufacturers have not adjusted design or documentation practices to satisfy the new scoring system, despite the EU’s intent to extend device lifespans and curb electronic waste.
The EU framework obliges makers to publish a repairability score for each model and to make spare parts and repair manuals available for at least ten years. The analysis found that most brands either omit the score from their product pages or publish scores that fall short of the minimum threshold. The lack of compliance suggests that the regulatory lever is not yet strong enough to shift design priorities that favor modularity or easy part replacement.
Apple’s battery swap reveals a hidden cost of delayed repairs
Two weeks ago a user replaced the battery in an iPhone 6S at an Apple Store for a $30 fee. The swap instantly restored app launch speed, keyboard responsiveness, and charging stability that had degraded over months of use. The same user admits that the improvement convinced them to postpone a planned upgrade until at least 2019.
Apple’s own December 2023 controversy over performance throttling sparked the battery‑replacement offer. After iOS updates slowed older iPhones, Apple admitted that degraded batteries forced a trade‑off between speed and unexpected shutdowns. The company responded with a low‑cost battery program and a software toggle that lets users choose performance or stability. The user’s account highlights a broader gap: Apple never proactively informed customers that a simple battery swap could recover years of functionality, even for those with AppleCare coverage.
The anecdote also underscores a paradox. Apple markets the iPhone as a “zero‑waste” product, yet its repair policies have historically limited third‑party part access. The EU’s right‑to‑repair push clashes with Apple’s closed ecosystem, raising questions about whether regulatory pressure will eventually force more transparent repair options.
Malicious chips in third‑party replacement screens expose a new attack surface
Research presented at the 2017 Usenix Workshop on Offensive Technologies demonstrated that inexpensive replacement touchscreens can be weaponized. The team from Ben‑Gurion University embedded a sub‑$10 chip inside screens for a Huawei Nexus 6P and an LG G Pad 7.0. Once installed, the chip intercepted the communication bus between the display and the operating‑system driver, logging unlock patterns, keystrokes, and even taking photos that were emailed to a remote attacker.
The malicious peripheral also exploited kernel vulnerabilities to install arbitrary apps and replace URLs with phishing links, all while keeping the display on to mask the activity. Because the compromised screens are visually indistinguishable from genuine parts, most repair technicians would not notice the tampering without a detailed hardware inspection.
The researchers argue that the security model of modern smartphones assumes a trusted hardware supply chain. Once a device leaves the factory, that trust boundary erodes. Third‑party repair shops lack a reliable method to certify that replacement components are free of hidden circuitry, leaving users exposed to a class of “chip‑in‑the‑middle” attacks that bypass traditional software defenses.
The friction between consumer expectations, regulation, and security
Consumers face a dilemma. On one side, EU repairability scores promise longer device lifespans and lower e‑waste, but manufacturers’ non‑compliance stalls progress. On the other, Apple’s battery‑replacement program shows that a modest repair can dramatically extend a phone’s usable life, yet the company’s opaque communication strategy keeps many users in the dark.
Adding to the tension, the malicious‑screen research reveals that third‑party repairs can introduce severe security risks. Users who opt for cheaper, non‑authorized parts to avoid high OEM prices may inadvertently install hardware that silently harvests credentials and exfiltrates data. The risk is amplified by the fact that many repair shops source components from opaque supply chains, where counterfeit or tampered parts can proliferate.
The convergence of these forces creates a market where the cost of repair is not purely monetary. A $30 battery swap can save hundreds of dollars and reduce waste, but a $10 counterfeit screen could compromise personal data. Meanwhile, EU regulators continue to push for mandatory repair documentation, yet the industry’s inertia leaves the enforcement gap wide open.
What to watch
The next EU enforcement cycle, slated for early 2027, will test whether manufacturers finally adjust designs to meet the repairability score threshold. Apple’s upcoming iPhone 15 launch may reveal whether the company expands its low‑cost repair program beyond batteries. Security researchers plan to publish follow‑up studies on peripheral‑based attacks, which could pressure standards bodies to certify third‑party parts. Tracking the EU’s compliance audits, Apple’s repair‑policy statements, and any new industry‑wide hardware authentication schemes will indicate whether the repair ecosystem moves toward genuine longevity or remains a patchwork of costly fixes and hidden threats.
Related Articles
Disrupt discount, Gemini breach, and new hardware raise stakes
Ticket discounts for TechCrunch Disrupt end soon, Google’s Gemini AI breach surfaces, and new hardware from Asus and Motorola arrive, highlighting industry tension.
Zoom’s Linux client reads clipboard, Android adds SELinux
Zoom’s Linux client was found to snoop on clipboard data, Android 4.2 ships SELinux and VPN lockdown, and Qualys joins Red Hat to harden containers.
Trezor breach fuels crypto scams as broader security threats
A second breach of Trezor’s email provider exposed hundreds of thousands of users, prompting phishing attacks while other tech firms grapple with malware, privacy lawsuits, and data‑sale concerns.