I can't imagine it'll take long before there are many and massive class action lawsuits over this incident. The legal bill will be massive.
I can't wait to see how many precedents get created over the total fallout from this event. Should be interesting.
Citation or it didn't happen. No way Apple has "assured" anyone that the app stores are 100% malware free at all times. They've said it's the safest thing out there which is a weaker claim (and still true).
Moving forward with my assertion and based on what others are saying about the Apple testing practices; I'm guessing that this was something that Apple should have caught in their testing, which if true would go towards proving culpability.
Negligence would then be the argument I'm guessing and then liability would follow.
I understand from many other situations it's arguable about whether the company could have foreseen the issue.
Typical breaches like the Dropbox breach which passwords were still hashed and therefore the request to reset the password was proactive. That's an acceptable breach to me and is bound to happen, but negligence such as Apple's or in the case of BA (British Airlines) breaking with known and valid credit card processes should result in conseuqences up to the criminal level depending on the situation.
BA link: “So, about that BA hack …” https://medium.com/the-automator/so-about-that-ba-hack-a82e5...
It never happens.
But beyond shutting the companies responsible for selling these applications down, there should be some criminal liability for the executives. Exfiltrating users’ browser history without reasonable consent is a huge privacy violation.
I wonder if it falls under CFAA.