For me the definition of actively hostile would require a locked down device that needs an exploit/jailbreak to install and a cat&mouse patch/exploit cycle - but it seems that Apple intentionally designed this to be allowed - what is giving you the “actively hostile” impression?