For example, I have no idea if the service can just swap out the whole enclave for another or something.
But even if that's possible, they gain nothing except a bad rep.
Discussion
If the code is well written, enclave operator can only turn it off, not mess with it in any other way.