“A device controlled by the owner” is one way of putting it. “A device capable of installing unverified software with an increased potential to introduce security vulnerabilities into the OS” is another.
Re:Unc0ver Jailbreak for iOS 11.0 to 13.5
by ValentineC on Sunday May 24, 2020 @08:42AM
(#23291101)
> “A device capable of installing unverified software with an increased potential to introduce security vulnerabilities into the OS” is another.
The jailbreak community is usually quick in introducing patches for security vulnerabilities.
The most recent Mail bug [1] had a patch released 29 days ago [2]. Apple only introduced a fix in a 13.4.5 beta, and it's unsure if the same fix was put into 13.5 [3].
Admittedly, it'll be even better if the community strongly encouraged the installation of such tweaks in Cydia et al.
[1] https://blog.zecops.com/vulnerabilities/youve-got-0-click-ma...
[2] https://www.reddit.com/r/jailbreak/comments/g7eujh/release_m...
Clearly the fact that you can jailbreak a device really means that the non-jailbroken one wasn’t really preventing the installation of software that abuses vulnerabilities in the OS…
Which isn't the case here. A device controlled by the owner isn't less secure than one that isn't. It's only a device controlled by an attacker that is. But "jailbreak detection" only detects the former (when it even detects that) and not the latter.
The fact that you can do banking on the web only proves that banks admit that you don't need a device the owner doesn't control in order to do banking.