Malware isn't really the primary threat. It's bad actors. It's specifically designed apps intended to rip people off. If an app goes through apples review proce

Malware isn't really the primary threat. It's bad actors. It's specifically designed apps intended to rip people off. If an app goes through apples review process and then accepts credit card payment (which is the entire reason these apps want to bypass the app store) and subsequently use the users credit card details for fraud, who cleans it up? The user will say that apple are culpable because it went through their review process, they approved the app. I think more likely apple would reluctantly do the android model and just allow apps to be downloaded and installed via safari. The user is responsible for what they install, the risk is on them, they can use the app store if they want safety.