I'm not sure I would consider a handful of examples of developers sneaking apps past the review team evidence of a "spotty record of stopping malware". Yes, you can trivially sneak things past app review by temporarily disabling disallowed features and re-enabling them once the app is released, this is literally what Epic did to get their payment processing system into Fortnite.

But the fact that all app distribution goes through the App Store means that malicious apps can be disabled once discovered, and bad actors can be banned. This is important.

If you compare the situation on iOS to the situation on Android the difference is night and day.

https://arstechnica.com/information-technology/2020/04/solve...

https://www.theverge.com/2019/7/10/20688885/agent-smith-andr...

https://www.kaspersky.com/blog/skygofree-smart-trojan/20717/

https://arstechnica.com/information-technology/2016/07/virul...

This type of malware is far more pernicious than an app getting snuck past review, for example rooting your phone and burying itself so deep it survives factory resets. And all of these examples were distributed directly via the web or from third-party app stores, so Google can't simply remove them from the Play Store either.

If you think the App Store has a spotty record when it comes to malware I wonder how you'd describe Android or Windows.

This is not a benefit of the App Store but a benefit of a tight boot chain that largely prevents persistence.

No, it's a benefit of the fact that side-loading (the most common malware attack vector on Android devices) is not possible on iOS.

Sideloading is totally possible. It is just ordinary customers don't have the right to do so.

I suppose that depends on how exactly you define side-loading. I'll go ahead and clarify that I meant having a platform-sanctioned method of bypassing the default app store and instead downloading and installing third-party apps from the internet. But I think you could probably tell that from the context of the sentence.

we need apps that can tell the difference between normal use, and a review process so as to hide functionality when appropriate and release functionality to the control of an actual user

Funny thing is my jailbroken iPhone 3GS was probably more secure because it had a firewall and adblocker installed. A PDF exploit got fixed faster as well.

That was 10 years ago though.