Factory testing: can we access "tinker" functions via USB for an unclaimed device?

ok, black magic? this seems to work to get into dfu mode.... why does this work??