3 ms·

An on-device service could upload executable hashes to Apple like on macOS, in addition to XProtect/MRT.