4 ms·

But if Facebook/Instagram/Messenger (or Alipay / WeChat as mentioned in the article) has this entitlement and does fishy stuff, I guess this can actually be a l

But if Facebook/Instagram/Messenger (or Alipay / WeChat as mentioned in the article) has this entitlement and does fishy stuff, I guess this can actually be a large privacy issue? Does Apple do any analysis of entitlement usage and withdraw them when abused? A similar thing I remember is the Facebook VPN "scandal" where I think Apple withdrew the Facebook enterprise signing certificate?

qwytw 3y ago
What do entitlements have to do with not asking for user permission though? Seems like separate issues.
- heyoni 3y ago
  Entitlements don’t require user permission.
  - qwytw 3y ago
    I think it varies by entitlement?
    - heyoni 3y ago
      Yes I think you're right. This one seems to be special though and might not require user interaction.