In a new 16-page report, Apple has laid out its arguments against allowing sideloading iPhone apps, claiming the practice would make its phones less secure and trustworthy for users. The report, which is titled â€śBuilding a Trusted Ecosystem for Millions of Apps,â€ť outlines Appleâ€™s existing security processes and how it believes these could change if it were forced by regulators to allow sideloading.
The report is part of Appleâ€™s pushback against lawmakers and other critics, who have argued that it should be forced to allow apps to be sideloaded onto its iPhones, bypassing its centralized App Store. In the US, the House Judiciary Committee is expected today to debate a series of bills aimed at addressing tech monopolies, including Appleâ€™s App Store policies. One such bill sponsored by Rep. David Cicilline (D-RI), chairman of the antitrust subcommittee, could force Apple to allow third-party app stores on its platform, Bloomberg notes.
â€śAllowing sideloading would degrade the security of the iOS platformâ€ť
Elsewhere, the EUâ€™s proposed Digital Markets Act (DMA) could compel Apple to allow sideloading of apps. â€śThe current DMA language that is being discussed, would force sideloading on the iPhone,â€ť Appleâ€™s CEO Tim Cook previously said, according to CNBC. This â€śalternate way of getting apps onto the iPhoneâ€ť would â€śdestroyâ€ť its security, the CEO argued. Epic also argued for Apple to allow sideloading in its recent high-profile trial with the company.
Apple already allows sideloading on its Mac computers, but it argues that this model doesnâ€™t work for iPhones because they carry more sensitive and personal information. Appleâ€™s senior vice president of software engineering Craig Federighi recently argued during the companyâ€™s trial with Epic Games that the Macâ€™s model means that it has a level of malware that â€śwe donâ€™t find acceptable and is much worse than iOS.â€ť
â€śAllowing sideloading would degrade the security of the iOS platform and expose users to serious security risks not only on third-party app stores, but also on the App Store,â€ť Appleâ€™s new report says. Apps that donâ€™t go through its App Store review process could contain malware that Appleâ€™s reviewers would otherwise catch, the company argues, citing research that suggests third-party app stores on Android (which does allow sideloading) are more likely to contain malicious code. Non-App Store apps may also not use Appleâ€™s security and privacy features.
However, critics have pushed back against Appleâ€™s claims about the security of apps on its store. Despite Appleâ€™s assurances that it has a 500-plus strong team reviewing around 100,000 new apps and updates every week, there have been numerous examples of scam apps slipping through its checks, including some that hide casinos in kids apps or others that charge extortionately high subscription fees. And forcing developers to use the App Store to distribute apps means many have to pay Apple a 30 percent commission on app sales and in-app purchases for digital goods, a commission that Cicilline has previously called â€śhighway robbery.â€ť
Some experts have also argued that the iPhoneâ€™s security has more to do with the security features of iOS, including the way apps run in a so-called â€śsandbox,â€ť rather than the App Storeâ€™s review process. But Appleâ€™s report claims that â€śthe best defense relies on a combination of all layers,â€ť combining App Store review with built-in platform protections.
Apple says allowing sideloading on iPhones would affect all of its billion-plus users, regardless of whether they actually want to download apps that arenâ€™t available on the App Store. Users might need to download a non-App Store app because they need it for work or school, or they might be unknowingly tricked into it. More broadly, Apple claims that sideloading would give malicious actors more versatility for how they attack iPhones. In other words, this isnâ€™t simply a matter of user choice, Apple says, because it would affect all iPhone users.
Finally, developers could also suffer if sideloading is allowed, according to Apple. The company claims users are more likely to try out new apps from smaller developers if they come from a trusted source, and that allowing users to get apps from anywhere could harm this trust and cause them to spend less.
Alongside its report, Apple is also lobbying lawmakers directly. Yesterday, the New York Times reported that Tim Cook called Speaker Nancy Pelosi to express his concerns about the antitrust bills. Today, Cook is scheduled to have a virtual meeting with the EUâ€™s competition head Margrethe Vestager, according to her official schedule.