[jethro_tell]

So first, having a multi user system was a good idea, running as a non privileged user is a good idea, and installing software through repos is a good idea. Linux isn't immune, it's just attacked differently and doesn't have the kind of surface area that would make attacks worth the effort. (not that there aren't thousands of linux boxes out there that are borked, they just aren't making the browser slow so people don't complain about it in the same way.

What would work really nicely here, is if apple had the app store as well as repo packages. So installing fdroid-for-iPhone from the play store shows all fdroid apps next time I look for apps. like adding a ppr to a deb box.

I don't know if they could still get leaned on to remove the access to that in the same way, but I would venture to guess that a secondary market for repos could be built in a way that is mildly vetted and also not tied to shareholder interests.