Exactly.

Everyone keeps bringing up this legendary "app store featuring safe curated content" keeping the "ordinary user" safe but the reality is both Google & Apple's stores are riddled with deceptive apps, scam subscriptions and spyware!

The real story with iOS (and to a lesser extent Android) security has been the switch to restricting the damage any particular app can do through process and resource isolation.

The App Store allows for apps to be forced to sandbox themselves. Very few macOS apps outside the App Store are sandboxed, for example.