This is a very, very poor article with no real grasp of comparable threat vectors. It seems to feel having two centralised vendors for this is worse than just

This is a very, very poor article with no real grasp of comparable threat vectors. It seems to feel having two centralised vendors for this is worse than just having arbitrary third parties, without explaining how this would be facilitated without any controls over this on an OS level, so it would then just be entirely dependent on all of your third party applications. That's a much bigger threat model than the OS vendor, requiring you to trust dozens of different vendors with different motivations to behave. The fact is really simple, if you don't trust your OS vendor that the APIs are as described then you're screwed and everything else is irrelevant. It is very clear the general public do not give a stuff.