Well, just like apple can auto remove applications that were pushed out from their app store, they certainly can install new application signed with privileged

Well, just like apple can auto remove applications that were pushed out from their app store, they certainly can install new application signed with privileged entitlements on your phone that can spy on you without you even knowing. Remember that when apple advertises that "built for security" garbage on you. At least with most androids you can unlock the bootloader and install something like linageos and remove google services to stop their ability to spy on you.