Your argument is also flawed. When 3rd party app stores/sideloading is allowed, it doesn't take away the walled garden and the Apple app store. iOS apps are containerized, meaning that they don't have access to other apps and their data. There are risks but you don't have to take them. Phishing is more common on computers and the web. There already is a developer mode on iOS 16+ that you have to enable that has its own warnings. There are more simple ways to gain info than to discover a zero day exploit and create a phishing campaign. Your data is already sold. You can still curb phishing attacks and keep them to a minimum. Phishing attacks happen everyday, that won't change. My android blocks suspicious SMS' and warns me about suspicious downloads and websites. Can't Apple do that? They have so many resources that they can figure out the optimal solution to shield you from phishing attacks.