[justinplouffe]

I think Apple is clearly overplaying the role that their app store policies like the "nutrition label", reviews and app tracking transparency have in the iOS security model. To me, the security features that matter are from the operating system, its implementation of encryption and the sandboxing model that's enforced by it.

The app store reviews are done by booting up the app for a few seconds and most of the rest is self-reported by the developers which almost qualifies as security theater. They probably also run a static analyzer on the apps but nothing would prevent Apple from offering that on-demand to users opening side-loaded software and letting them choose to run or not after seeing the result.