Right, in theory iOS should sandbox it. But all the other functionality that’s exposed is probably getting sent over (think ip address, connection settings, iOS OS fingerprint). My guess is most of that data is just a keep-alive c2 style connection with ByteDance. Heaven forbid the CCP develops some iOS zero days and then has a list of every single iOS device that would be vulnerable to it.