> It seems weird that two OS divisions would really be that different. It’s not weird. The lack of a first class sandbox model on desktop certainly makes its s

> It seems weird that two OS divisions would really be that different. It’s not weird. The lack of a first class sandbox model on desktop certainly makes its security properties and threat model “different” than those of the iPhone. Yes both are built around XNU and both use APFS, but the “surface area” of attacks is far different across the platforms. For all we know, APFS bugs like these exist in iOS but haven’t been found because finding them would require rooting the phone to circumvent the sandbox model.