Comment by ryankrage77
Comment by ryankrage77 13 hours ago
Apple and Google insist their walled gardens are needed for user safety and security, but they can't even catch popular apps violating their own policies. It casts (even more) doubt on their ability to screen for malware, phishing, etc, which are already rampant.
You're not wrong, but Apple and Google probably remember things like the Facebook VPN fiasco of 2018, where Facebook's VPN app was banned from the app store for breaking privacy rules – and then they turned around and abused enterprise app certificates to sidestep the ban.
> By installing Onavo, millions unknowingly granted Facebook full access to their digital activity. App usage, browsing habits, and precise timestamps were silently collected. Facebook VPN didn’t just observe its own users - it tracked behavior across rival platforms like YouTube, Amazon, and Snapchat.
> ... Engineers exploited Onavo’s infrastructure to install a root certificate on phones, masking Snapchat’s servers to decrypt user activity.
This is an obvious security hole that should never have existed, but the fact that Facebook eagerly exploited it, while abusing VPNs for tracking and enterprise certs for sidestepping app store privacy rules, shows the threat landscape.
https://www.analyticsinsight.net/news/when-facebook-used-vpn...