The difficulty is so low that it does not really matter. If you go by their bug bounties [1][2], then it is only $1M to full remote zero-click persistent compro

The difficulty is so low that it does not really matter. If you go by their bug bounties [1][2], then it is only $1M to full remote zero-click persistent compromise in both systems. If you go by Zerodium, which is a 3rd party purchaser and thus establishes a third party commercial market price, [3] then it is only $2M for iOS and $2.5M for Android. If we were to divide that price for an iPhone exploit by the number of iPhones sold in a year [4], then that is a mere 1 cent per iPhone. As you can see, the price is so low it hardly even matters if there is a difference. There are literally millions of people in the US alone who personally have the liquid net worth to purchase a remote wormable persistent compromise that you can use to mass infect any Android or iPhone. Essentially every business with more than maybe 10 employees has enough assets to purchase such a weapon on the market. Just today I read on HN that the US government inked a deal for $22B over 10 years for 120k AR headsets from Microsoft [5] which comes out to ~$183k/headset. So, a weapon you can use to fully compromise any phone you want is equal in cost to a mere 15(!) headsets. That contract alone would be enough to purchase 10,000(!) vulnerabilities at existing clearing prices and $22B is only ~1/200th of the yearly US government budget. Frankly, the entire thing is like two people jumping and comparing who is closer to landing on the moon. [1] https://www.google.com/about/appsecurity/android-rewards/ https://www.google.com/about/appsecurity/android-rewards/ [2] https://developer.apple.com/security-bounty/ https://developer.apple.com/security-bounty/ [3] https://zerodium.com/program.html https://zerodium.com/program.html See Mobiles payout. [4] https://www.statista.com/statistics/276306/global-apple-iphone-sales-since-fiscal-year-2007/#:~:text=In%20their%202018%20fiscal%20year,stayed%20relatively%20stable%20since%20then https://www.statista.com/statistics/276306/global-apple-ipho.... [5] https://techcrunch.com/2021/03/31/microsoft-wins-contract-worth-up-to-22-billion-to-outfit-u-s-army-with-120000-ar-headsets/ https://techcrunch.com/2021/03/31/microsoft-wins-contract-wo...