Also, Windows works pretty well with software from third-party sources, or would you forbid them in Windows as well? Sure, there are the occasional crypto scams which disable a hospital here and there, but this can arguably be prevented by not giving non-admins admin permissions.
Yeah, which is why no one with any sense is going to be fighting againist this. Third-party installs on Android are largely scams. I don't think you've thought this through.
> Also, Windows works pretty well with software from third-party sources, or would you forbid them in Windows as well?
Windows is well known for being insecure compared to others. Apple have also worked to secure users against third-party apps.
> Sure, there are the occasional crypto scams which disable a hospital here and there, but this can arguably be prevented by not giving non-admins admin permissions.
Don't they use local privilege escalation attacks as part of the attack?
The reality is we don't need to fucking remotely rootkit someone's phone to scam them. This isn't how the vast, vast majority of scams are done.
Relying on client side trust is a recipe for disaster, any anyone even kind of technically minded should see that.
Granny is when someone on the phone tells her how, because she needs to report some stuff to the FBI, IRS, etc.
Just point granny to the super secure Play Store and have her download anydesk and boom, now you remote control her entire phone. And you didn't even need to hire a development team to do it.