> The problem is, when the option exists it opens up an attack vector that I need to defend against, as it will surely be exploited by malware at some point, do

> The problem is, when the option exists it opens up an attack vector that I need to defend against, as it will surely be exploited by malware at some point, downloading an app when you visit some scam site, and boom you're now infected. This makes no sense. There is no "boom". You can't accidentally do it. There are a series of very deliberate steps, with numerous warning signs. Even on Android I have to specifically enable an option to even be able to install apps from alternate sources, and it is a separate permission per source, and this option can be locked down on a managed device (e.g. a work phone). By your logic, there should be no web browsers on iOS, since someone might visit a scam website and give away all their money. > They want to be able to give away their app and sell subscriptions, and they expect Apple to foot the bill for the infrastructure required to provide downloads. Nobody expects that. What the EU wants is, simply let another app store compete. That new app store will host the downloads. You keep shedding tears for the costs to Apple's infrastructure, yet as I keep repeating - what many developers really want is to NOT use Apple's infrastructure. NOT use Apple's payment processor. If the problem is that we're being a burden to Apple, well then I'm in full agreement with you, let's stop doing that!