> I believe the current system for protecting iOS and its users could easily be split in two.

Correct!

My phone downloads the App from the Play Store and then does a scan locally, on the device.

There's no need to have a centralized, proprietary, anti virus...