> Apple’s approach is pragmatic. If they offered anyone the ability to jailbreak, you would see major app makers manipulating naive users into jailbreaking in order to bypass security, payment restrictions or similar.

The problem is a social one and hasn't been properly solved by technical measures as you note. Instead of acting like the digital world is somehow separate from the rest of the world, we should have enough strong and effective laws and regulations that if a person steals from me, they can reasonably expect to spend a few years in prison.

The result of discovering a person has released a fraudulent product to the Google Play Store is currently that they get get their Google account shut down, maybe. The actual result should be that they find out what the inside of a prison cell is.

The result of discovering that a company tracks a user without effective permission through the use of dark patterns that meant a user pressed "I agree" under the misapprehension that this was the only way of using the app should have their shares acquired by the justice system at a penalty rate - or some other effective penalty so that companies don't balance the cost of obeying the law with the cost of the fine.

If Apple believes that their users want protection from digital thieves, Apple has a responsibility to lobby for better laws and regulations. They can't use halfmeasures as a pretense in the hope that some amorphous other will get laws that protect their users passed.

> If they offered anyone the ability to jailbreak, you would see major app makers manipulating naive users into jailbreaking in order to bypass security

This is FUD. Linux works flawlessly despite giving all the freedoms. Typical users don't install anything outside the repositories. Apple has countless problems with security and privacy in their App Store.

> This is FUD. Linux works flawlessly despite giving all the freedoms.

eyebrows raise to the ceiling

> Typical users don't install anything outside the repositories.

head tilts nearly horizontal with the floor

"Flawlessly" is here being stretched beyond the breaking point, and anyone who is OK with only installing software from the official repos for any major Linux distro is not a "typical user", very obviously.

I've been using Linux exclusively since the mid 90s. I've run so many different variants. I was a attended the church of Slackware for a long time. There has never been a time in my many years of using Linux that anything has been "flawless" and I _definitely_ have to install things "outside the repositories" pretty regularly. Even if that's a broad statement meaning "any type of repository anywhere, including but not limited to git."

Right, I'm struggling to think of a user profile that would be OK with just software from major distro repos.

"Normal" users? They're going to want several proprietary programs, some of which will surely not be in even the non-free repos, unless they're an only-uses-the-browser type who'd be fine with a Chromebook (or, more realistically for that user profile, just their phone).

Power users? I have to assume my experience of often wanting or needing something outside official repos, or a newer version of something in official repos, is far from unusual. I'm not even that demanding a power user, and that's still a very common situation for me. What's worse is the more one chases system stability, the worse this problem becomes, since Linux distros mix the base system and user-facing applications all together (and the structure of x-window-system/wayland/drivers/GTK/QT makes it hard not to do this)

That is because Linux is not used by general public.

Unfortunately you can't even find a Linux computer in shops anywhere, which could be the reason few people use it. It's actually harder to find malware there.

See also: Android is Linux used by the general public.

Funnily, you can find various somewhat-Linux devices in stores mostly, except they're called 'Chromebooks'. This is the same device series that uses Coreboot as a boot loader and usually had an internal screw to remove to disable firmware write protections and fully unlock the device, as well as other visually and auditory (they make a large beep on boot) tamper-evident 'developer unlock' modes. Nowadays instead of the 'unlock screw', there's a mandatory security chip that can be unlocked into a less visibly tamper-evident mode in which it is disabled via a special USB-C cable for sale on the open market with a reference schematic available as well, which is a much more fun solution to assert physical access. [1]

Many older models also would run mainline Linux fine, and the default Chrome OS install usually has a container and a Wayland to Chrome adapter behind a toggle.

[1]: https://unrelenting.technology/articles/FreeBSD-and-custom-f...

I don’t think it’s relevant for the general public.

At what point do we need to start worrying about Apple holding too much power over their closed ecosystem and can potentially abuse it?

Until we leave in a capitalistic system? Apple should be scrutinized, but I prefer a world in which a company with strong values polices the ethical limits of technology, to one where companies like Facebook (and Google, to a lesser extent) hypocritically push an open agenda just to exploit such technologies to milk our data.