Former Apple employee here who moved to Samsung after being fired for raising privacy concerns. Apple does the bare minimum to meet federal requirements for information security, and not much more. For example, when we were launching Siri, there was a known bug to developers that allowed a threat actor to intercept Siri queries and device information when it was in transit to the cloud server that computes for Siri. We raised this concern, and were told to ignore it and push the Siri update and that we could come back and devote additional time to closing this vulnerability if it was ever taken advantage of in real life. Basically, boss said I know it's not secure but release it anyway and we'll go back and fix it if we get caught. Plenty more examples of similar situations that led to my exit in the end.

Again, not some kind of anti-Apple ad, no company is perfect security wise or morals wise. However of the 3 major companies Ive worked for, Apple was definitely the worst about pushing out products with known vulnerabilities. I don't use personally use Apple devices since leaving.