I just gave you a fairly straightforward and realistic method of malware injection into an app. Signed binaries prevent me from re-uploading the malware. What is unsubstantiated here?

And despite repeated claims of the loud and ignorant, you can side load to an iPhone without jail break. it does require a mere $100 a year and handful of terminal commands, but possible if you’re determined.

I’m willing to belabor your last point: the floodgates can open if all the restrictions are relaxed. One very dangerous system call[0] stands between Webkit and your choice of any browser engine. It’s not clear to me on a technical level if allowing that freedom to exploit by one app prevents any app from exploiting.

[0] https://developer.apple.com/library/archive/documentation/Sy...