There's a reason why all security professionals I know use an iPhone. To my knowledge there hasn't been a single case of an iOS application being able to read

There's a reason why all security professionals I know use an iPhone. To my knowledge there hasn't been a single case of an iOS application being able to read the data of another application - or OS files it wasn't explicitly given authorisation to do so. It can be done, but for desktop it has never been a priority. A bit like the earliest versions of Windows encountering The Internet for the first time. They were built with the assumption they'd be in a local network at best where clients could be trusted. Then The Internet happened and people plugged their computers directly into it.