Citing xcodeghost as a big smoking gun of Apple malfeasants is absurd. Apple handled that whole situation really well considering it came from a bunch of downloader websites where the attacker had modified clang and Xcode.