An iOS trojan would have slightly more limited impact, but if (for example) you gave the app "Access to your Photos" in order to save something, the app would still be able to read all of your photos and potentially send them back to home base as it chooses.
The store rules and moderation is a bit stricter, do that may be one reason we hear less about iOS malware. But it's still out there.
At first the app store privacy policy was a broken link. Later they got it to work, and it basically used broken english to say: we can collect anything.
uninstall and never looked back.
One tip:
The iOS native Notes app can scan documents into a .pdf file.
And it's quite easy to run headless apps/processes.
XcodeGhost was a compromised compiler suite. See https://en.wikipedia.org/wiki/XcodeGhost#Attack_vector