That is objectively untrue. Every system that has allowed sideloading of apps has been compromised by that very feature.

"Every society that has been allowed to drive cars has had car accidents."

I know the risks, I want to do it anyway. I don't want a nanny over my head.

That may be a better analogy than you intend. The problem with cars is that everyone suffers the consequences of your driving. In fact, you may have the least exposure to the carbon monoxide, pollution, or even accident risk. Pedestrians, cyclists, property owners, and other drivers are all at risk of your driving.

For that reason, societies tightly regulate car ownership and driving. More so than phones: I don’t need a license to use a phone, nor do I have to register my ownership or have it regularly inspected.

But technology these days has this same characteristic: Others bear the costs of your decision. Every device connected to the internet is a DDOS vector.

I don’t want you deciding whether to keep your device up to date with the latest security patches, because if you (and a few million others) don’t, GitHub is down for me.

So, are you doing the responsible thing and not using a laptop, or any device that's vulnerable, like a router?

Bear in mind that the vast vast majority of apple's customers have 0 interest in sideloading apps- if you're apple it makes a great deal of sense to trade off security for the masses against a few power users who can't sideload apps occasionally here and there

A compromise doesn't affect you, it affects Apple and the app developers. iOS has the best apps because it has people buying them instead of everyone and his brother pirating.

Anyway, if you don't want to deal with how an iPhone works, how about buying a different phone.

But can ruin your privacy guarantees.

How? Sideloaded apps would still be sandboxed.

It's more than just sandboxing: Apps going through the App Store have to meet a stringent set of requirements, chiefly being no private API usage, no circumvention of features intended to give the user control/privacy, and no third party web engines (and all the performance and security implications that come with those). Apple regularly rejects apps that violate the first two, and while I'm sure some get through they tend to get buried by scores of more legitimate alternatives. Sideloaded apps get to bypass all of this.

If they ever do offer sideloading/gatekeeper, it should be turned off by default and turning it on should make the risks crystal clear with a scary alert and passcode prompt. Average folks should be heavily discouraged against using it. Gatekeeper works on the Mac, but iOS devices are both far more numerous and far more personal, so the stakes are much higher.

Apple's checks are not very deep. They suffice to keep honest people honest but do little against an actual adversary.

The number of safeguards they have in place make that a moot point. If it's not discovered in testing, it's sandboxed. If it gets past the sandbox, they have a killswitch that's registered to the app's specific ID. There's very little damage that an app can do if it's gone through the App Store proper.

That could be done for sideloaded apps too.

Sideloaded apps, by definition, are not tracked individually by Apple. You can't make a killswitch for an app if you don't know what the app is.

And yet the Mac has a malware killswitch. Clearly it can be done.

Source? The Mac only has the ability to prevent unsigned apps from being installed which is easily disabled. There's no killswitch for unsigned apps.

Sideloaded apps make attacks on non-sideloaded stuff a lot easier.

Not to sound like a broken record, but, how?

Technically, they do. You just have to pay more for it (aka buying a developer account).

Actually you don't even need to pay for it these days. Free Apple Developer accounts can side load apps through Xcode

You don't even need Xcode. You can do it fine on windows or linux using cydia impactor[1]

1: http://www.cydiaimpactor.com/

Only for seven days at a time though, no? Either way, that affectively means anybody can sideload if they have a Mac.

You need to pay for the Mac to use Xcode though...

Correct. You need to own a computer to run computer software.

An Apple computer. To run Mac software. That's what you probably meant.

You don't have to own an Apple computer to run Mac software, so your statement is factually false and his isn't.

Legally.

No, you need to own an Apple computer to install things on your phone. I don't need a computer to install APKs on Android.

No, you don't need an Apple computer to install an IPA anymore than you need a computer to install an APK. Let's stop comparing Apples and Oranges shall we? You need a computer to compile and sign an IPA, the same thing you need to compile and sign an APK.

> You need a computer to compile and sign an IPA, the same thing you need to compile and sign an APK.

You can compile and sign (and, AFAIK, upload to the Google Play Store) an APK on an Android device, using AIDE and perhaps other dev toolkits. No computer needed.