On iOS, every app is fully sandboxed from all others. You can't even run background processes on iOS. Anything that modifies system behavior (such as activating

On iOS, every app is fully sandboxed from all others. You can't even run background processes on iOS. Anything that modifies system behavior (such as activating a VPN that snoops traffic) requires system confirmation dialogs. No compromise can happen here. On Android, isolation is not as strict and there are more holes. But each app runs as a separate Linux user, and with each Android version Google locks down the security model more. Rootkits like you find on Windows just aren't possible on iOS and Android. I believe they still allow clipboard snooping. I can't confirm nor deny whether Wechat does this. Apple and Google should do something about that and further restrict their security model.