Same with Android nowadays too. I don't understand how this can happen without the OS's knowledge, unless it's a major security exception made by apple+google on purpose (which I doubt as you do), or a major zero day vulnerability they are exploiting, of which there would probably be evidence of this.