When you add a new device, you are asking to be let into the circle of trust and get access to these secrets. How can Apple do that while at the same time keeping the FBI or anyone who has broken into your iCloud account from doing the same thing? Apparently the solution Apple came up with is to encrypt or hash the device password of devices already in the circle of trust and allow in whoever can prove that they know the password of one of the devices.