They should pay Gruber more then to keep him from publicizing the issue at all.
That aside, if Apple's sandboxing of the OS is solid, I don't see how a JIT would be problematic.
That aside, if Apple's sandboxing of the OS is solid, I don't see how a JIT would be problematic.
This means that your app can load arbitrary updates from the server and execute them, for example based on some purchase not made in the AppStore.
This is all about keeping the 30% tax and only tangentially about security.
I think most of us on HN understand that "safety" is something you just have to accept is never 100%.
As an example a team responsible for security can test the standard image libraries (libjpeg, etc.) using file-fuzzing to find any bugs around buffer overflows, etc. It's good they do this but we all know that this is still a statistical shot in the dark that may still leave a vector somewhere in the framework.
https://support.apple.com/en-us/105120
So Apple considers its own trusted JIT a security threat surface.