> It was probably built around the assumption that Apple can always fully scrutinize the binary of each application that makes it onto the device and remotely d

> It was probably built around the assumption that Apple can always fully scrutinize the binary of each application that makes it onto the device and remotely delete any apps that misbehave AFAIK, Play Protect on Android already does this (or the checking and warning part) for side loaded apps. Apple already has Gatekeeper and app notarization on macOS, and both these are intended to check for malicious apps and unsigned apps. The same thing can be done with a little bit of on-devide computation combined with Apple’s services on its cloud.