I am not confused. Please reread the thread.<p>You asserted that iOS is &quot;unfixable&quot; because the ObjC runtime cannot prevent apps from using &quot;private&#x2F;internal calls that your app is not supposed to use,&quot; whereas &quot;Android gets code access control for free with Java.&quot;<p>But as I showed, Java access controls are easily bypassed, so they do not provide any security. This is by design: security is enforced at the process boundary, not by the runtime.<p>My hope is that you now appreciate that neither the ObjC nor Android Java runtimes are a security risk, because they are not responsible for enforcing any security policy.<p>&gt; Also my larger point was the iOS security is not fundamentally better than anything else<p>iOS security is fundamentally better. You can read the whitepaper to understand the ways: data protection classes, the Secure Enclave, and lots more.<p>But here&#x27;s a damning fact: iOS encrypts your data by default, Android does not. That by itself makes iOS fundamentally more secure.