All of that is already accounted for and protected by in the OS. An app cannot normally register daemons or agent (or even an XPC service). Installing is already limited to FrontBoard standard installation mechanism. All that will remain in a possible open iOS future.

Except usage of private APIs?

I can hide any private API usage already for normal store submission. If I am the tiniest bit careful, I will get away with most private stuff that is still not protected by the kernel using entitlements. For example,

https://github.com/LeoNatan/LNExtensionExecutor

This is a framework I obfuscate API usage, and is present in several App Store apps that I know of.

Apple security comes from kernel hardening, not static API analysis.

Fair enough I need to look more into it. Thanks for the info

Until Apple detects its usage and bans your account for breaking TOS?

That framework’s logic has not changed in years, and neither has Apple’s static analysis checker. It’s just security theater at this point.

> An app cannot normally register daemons or agent (or even an XPC service). Installing is already limited to FrontBoard standard installation mechanism. All that will remain in a possible open iOS future.

So Apple won’t comply with the EU law then?

EU law doesn't have any requirements to change that.

The only requirement is that any APIs first party Apple services use can also be used by competing 3rd parties. If Apple isn't using those features in any competing services, they don't have to open it up for everyone. Alternately they could remove those APIs from their own apps and still be complying.

The goal is fair competition. I should be able have Google Pay to compete with Apple Pay, but Apple don't let other apps use the NFC for that. It's not fair competition when iMessage can be your default SMS app, but WeChat/WhatsApp can't. But if Apple choose to, they could separate iMessage and SMS and still be fine under EU law, cuz now none of the competing iMessage/WeChat/WhatsApp will be your SMS app.

So don't use adobe? Why you are writing like you are forced to sideload? You can just not sideload and stay in the apple's ecosystem and be safe. Don't install chrome if it's worse experience than safari? That's the thing with freedom: if you value your privacy, you'll still get it without sideloading/not using products that are screwing you

>So don't use adobe? Why you are writing like you are forced to sideload?

Because it doesn't matter if they don't threaten to kill you. If you need the apps and they only offer them via sideload, then you're still forced.

dont use their apps at all? They already have scammy behavior for cancelation. It's like saying if you need medicine and you can only find it on dark market: the action isn't buying medicine on dark market, it's finding/asking for a replacement that is easy to buy. If adobe will exit appstore, another players will pop out with similar functions and that are present on the store

“Sorry boss, I can’t open the email and attachment you sent, because MS and Adobe both decided they need to side load their apps, and I’m not about that on devices I use”

Yeah that’ll go down so well.

I need you to understand that orgs will abuse their standing and power, regardless of what users want. At least in the existing walled garden setup, they’re forced to at least try and behave.

like yes? if my job requires an app that can't be installed from official app store something is wrong and I'll not install that sh...? or at least they should provide work phone? Or at least install app on another account just for that(not sure if ios has this)

>if my job requires an app that can't be installed from official app store something is wrong and I'll not install that sh...

Yeah, good luck with that.

And we haven't touched personal use, features or format compatibility not existing elsewhere, and so on.

emm, thanks, that's already what i'm doing...

In many professional situations, that would be like telling your boss you don't feel like using Teams or Github or AWS, because you don't agree with their business practices. Or telling your clients.

It's not a Vim vs Emacs vs VS Code choice.

work is work, personal device is personal device. What you use for work doesn't matter since you either should be provided with a work device or at least be able to install apps on separate account God, mental gymnastics some people perform to justify ios limitations... Like WE HAVE THIS ALREADY, on macos, windows, android... and insta/wh/fb apps are still on google play... and you can still access them in the browser. Not to say that if apple makes the process to install these sideloaded apps a bit harder (like multiple warnings 'DANGER' and confirmations, the possibility apps will migrate fully outside appstore tends to zero

Adobe could do all of this on Android, yet they don't. So I guess your point is moot?