That’s the thing - I bought a completely locked down device where a central authority dictates what can be installed since I trust them to verify the app’s capabilities and the source’s identity. I know the software isn’t impenetrable nor apple infallible, but it reduces my threat model a lot compared to if I were running Android.