So Safari is top attack surface, why don't they ban Safari?

Because people know the difference between websites and apps.

Are there actually differences between websites and apps?

It's just some code you got off the internet and run on your phone

Two differences seem relevant here. Apps are reviewed by Apple, and are only able to use certain payment mechanisms.

You’re giving the same answers that Apple Marketing would.

Do you think it isn’t true? You seem to be just deflecting.

I do not think it's true that Apple's decision to ban Microsoft's xCloud is to protect their customers from games that are actually trying to defraud players. If this is deflecting then I guess call me the Great Deflector.

Do you think it’s true that users can tell the difference between Apps and Websites?

That’s the question you replied to without answering before.

Yes, I think they can tell the difference, but I don’t think that they’re somehow in an unguarded / safer frame of mind in apps, especially with how iOS will immediately transfer you to native apps. It’s an extraordinary claim by Apple that would need extraordinary evidence before I believed it.

It’s a ordinary claim, completely supported by the often quoted point that people are much more willing to spend money on iOS than Android or the web.