By that logic we should all be happy that Flash isn't a spec implemented in 4 different browsers, but rather on monolithic monster from one company, in all of them.

Which also emphasizes the point that Apple wouldn't ship this sort of code on iOS if it wasn't properly secured.