Part of the issue with Android is that, despite the fact that application packages are signed, their signatures only guarantee future upgrade tampering isn't a

Part of the issue with Android is that, despite the fact that application packages are signed, their signatures only guarantee future upgrade tampering isn't a problem. Meanwhile, Apple is likely still going to require sideloading to have a valid Notary certificate, which is bound to a root CA, meaning that Apple can handle some amount of validation of certificates and revocations.