If it is not open-source, and if it is not offline-functional, then it is not privacy-first design. Safe browsing updates can be served like software updates. A

If it is not open-source, and if it is not offline-functional, then it is not privacy-first design. Safe browsing updates can be served like software updates. Apple could demonstrate they serve software updates from servers that don't log any PII data. Only then they would have actually improved the situation.