System security doesn’t care about your feelings — any rogue program, or even an npm install can encrypt your whole drive, or install a keylogger.

This is not true of android and ios.