> No way for Apple to know you are calling https://sometwiddle.com https://sometwiddle.com is nefarious or not, at runtime They could blacklist the common trac

> No way for Apple to know you are calling https://sometwiddle.com https://sometwiddle.com is nefarious or not, at runtime They could blacklist the common tracking app's domains/IPs. It might be futile since I'm sure they'd jump IPs daily/hour/etc if they need to. Perhaps they have a better way to detect them during app approval. Either way, the point is that Apple is trying to combat tracking in safari but it seems like they've completely missed this attack surface and that might be why they're being targeted. But you're still right that a better article would also investigate Android apps since they're surely doing the same thing.