For apps that are genuine but behave as malware in terms of data collection I'm not sure it will be possible to build walls high enough to keep them out short o

For apps that are genuine but behave as malware in terms of data collection I'm not sure it will be possible to build walls high enough to keep them out short of regulation, or that currently users aren't already unknowingly accepting those risks. As is for iOS apps while the user can opt out of their IDFA being shared other tracking methods other fingerprinting methods can still be used, Fingerprint.com/demo has a good demonstration. If sideloading stays prohibited I'm not sure what would stop Facebook from migrating to a browser only version. Over the long term I'm not sure there's a good solution other than legislation arriving at some "acceptable" level of tracking, given how crucial expanding tracking is to social media companies.