[ahofmann]

Ok, but my point was that on Android and iOS it is possible to install apps without touching your phone. This qualifies as remote code execution. You need your credentials for doing this, but google and Apple apparently don't need them.

[pizza]

Yes, but RCE is typically shorthand for “RCE by someone other than the owner of the device”

[ahofmann]

When I buy a phone, I'd like to think that I am the owner. I haven't rented it from the vendor or something.

[bigiain]

That’s exactly what the vendor who owns it wants you to think…