The threat vector you ascribe to Apple here exists for Google and Android as well, though, so it's not really an advantage of Android's model over Apple's.