> ... security firm gets a chip on their shoulder, they can install a persistent backdoor on your phone...
But a random developer can't exfiltrate my data, which is the WAY WAY more common scenario that the previous poster was worried about.
I agree with them. The Apple App Store prevents a lot more malware than the ability to install ANY software. I like the Mac App Store as well, its a large library of software that is virtually guaranteed to be safe from infecting your computer with a virus.
Now, I know how to sideload onto my iPhone, I have homebrew on my MBP, but my brother/sister doesn't, my aunt can't, my uncle assumed his phone was facebook, and they are safer (from viruses) for it. Make installing viruses harder!
I spent decades as the de facto IT person in my family, and when iPhone and Android came around, family members started buying MacBooks, my load got lightened a LOT.
Well, Apple will have to redesign their security model, then. If the iPhone relies on Apple's white-glove curation to stay secure, then European users are enough of a reason to overhaul their security model.
It's great that you know how to sideload, I'm not saying everyone has to know how. I'm arguing that the option should exist regardless of if you pay for a $99/year subscription fee. It should be a part of owning the hardware you paid for and purchasing the right to control it as the user.
We are not buddies. And I am not confused enough to believe NSO Group would be interested in me. This is plain paranoia you are using to try to win an argument. Calm down. Besides, where is the competitive harm if you are so happy with your Android? Look, I am happy with Apple doing some basic things to make the device relatively safe. I know nothing is absolutely safe. And again, I am not high profile, and I am also not paranoid.
> Your security is nonexistent unless you disable iMessage and JS in Safari, even then Uncle Sam has Five Eyes watching your every move for any traces of "terrorist" support.
Your security is non-existed until you've established a realistic threat model. And if it includes targeted surveillance by nation-state actors, you've got bigger OPSEC problems than just your phone.
