Sure Apple can create their area of trust/safety/security in their apple store allowing those who want that to stay there. They can't however do that on a devic

Sure Apple can create their area of trust/safety/security in their apple store allowing those who want that to stay there. They can't however do that on a device they've sold to customers. The question from a principle standpoint is - can companies stop a customer from modifying a device they own when it only effects the customer. Or more realistically there is more than one question and you have to make trade offs between the right answer to all of them (and what people believe the right answer to be). My view is: Make it hard to install out of App store, warn people about all the security/trust/safety there losing each time they enable a fine grained permissions. It's a simple security rule; don't install anything not in the app store, yes pay the 30% premium for that security. Yes it's not perfect but the current situation definitely isn't either.