The problem is that if it’s possible to trick grandpa into downloading a malicious app then it will happen. The only defense is to not make it possible.
You can argue if that’s a worthy goal or not but thats what Apple has to do if they want to make it impossible to trick people into downloading malware.