Good approach. Sadly, it only lasts a few months before iOS with maximum hardening (lockdown mode + Apple Configurator supervised) falls to another zero day. Then the only option is DFU reinstall, which forces unstable iOS install.