[geofft]

> Don't add any mail accounts to the native iOS mail app.

Woah, I haven't heard this advice before—is the argument that the native mail app is less sandboxed than an App Store app? If so that makes a lot of sense (especially given P0's recent exploit chain involving an IMAP client vulnerability), sigh.

[kkbaxter]

MDM related APIs change so often I just tell people to assume that all the native apps are less sandboxed.

Another thing you can do is to download apps using one Apple ID, then login again to the App Store with a different Apple ID.

The tricky thing about iOS is things are always changing, so precautions that might seem fruitless today may be critical tomorrow.

[geofft]

I'm not sure I follow - what potential changes would this defend against?

[walterbell]

Any recommendations for non-Apple iOS IMAP client app, which does all processing locally?

[jamesponddotco]

Canary Mail [1] comes to mind. They also offer PGP encryption support.

[1] https://canarymail.io/

[walterbell]

Thank you!