> Apple scans your information in your own device (and its operating system is even closed source and cannot be verified).
Open source may be better in certain ways, but a statement that closed source cannot be verified as to what it’s doing is narrow and incomplete. Android’s key parts are also closed source (there’s a lot more in “Android” than AOSP).
Thats where reproducible vuilds come in - I would not be surprised if reproducible builds became a legally enforced default in security sensitive contexts after all the high level cases of outside attackers slipping mallware into blobs built by enterprise vendors.
Open source may be better in certain ways, but a statement that closed source cannot be verified as to what it’s doing is narrow and incomplete. Android’s key parts are also closed source (there’s a lot more in “Android” than AOSP).