This line of argument is incorrect: It’s not the AppStore that makes secure apps possible: It’s the mandatory sandbox that apps run inside that actually makes the system secure. It’s fairly easy to push malicious code to the AppStore but bypassing the sandbox restrictions is what keeps bad apps at bay.
Yes, this is one of my biggest pet peeves and largest disconnects when reading these threads. I dont understand how people can accept apples privacy and protecting the consumer argument when that has nothing to do with the app store. That is iOS itself and its permission model.
Do people really think app store approvers are doing malware analysis on apps and analyzing network traffic to approve them?
I mean, both contribute to the security of the ecosystem.
There are plenty of APIs available within the sandbox that are meant to be used by developers to use for legitimate purposes. But those same APIs could be abused by malicious actors as well.
That is why Android has historically had more problems with malware even though Android apps are also sandboxed.