> That's just blatantly false ... But just gathering data that is valuable enough to exfiltrate is near impossible, considering apps can only access what's spec

> That's just blatantly false ... But just gathering data that is valuable enough to exfiltrate is near impossible, considering apps can only access what's specified in their manifest and explicitly allowed by the user. I think we are talking about different things. First, I was specifically talking about ios / iPadOS. Neither platform has any outbound firewall that can stop apps from access the internet (unless you count the very basic one that allows you to restrict net access to apps when you use "mobile data"). So if you are on Wifi on your iPhone/iPad/iPod, any app you are using has free access to the internet. This has the potential to "leak" user data. E.g.: I like to use the Adobe Acrobat app to read any PDFs. But when you use the app, you have no idea if Adobe is collecting meta data information on the PDF's you have, or even uploading them. Same with Microsoft products. Or even Google's. If I could disable internet access to these apps, 90% of which don't need them in the first place, I could use them with a bit more peace of mind. That's what I meant by when I said allowing unrestricted internet access to any apps, can "leak" our personal data to the internet, on ios / iPadOS platform.