Yes, we can agree that owning the entire platform is worse. But my point is that you can't ever achieve that without someone noticing. Think millions of devices

Yes, we can agree that owning the entire platform is worse. But my point is that you can't ever achieve that without someone noticing. Think millions of devices. The malware would have to work flawlessly across a number of versions, interacting with many components installed, and even on jailbroken devices. It is very risky and intrusive, which makes it much less likely. An attack against TLS connection authentication is so _clean_ in comparison, that I can easily imagine various parties jumping to the opportunity.