Apple should stop saying the App Store adds meaningful security, which seeds cynicism among devs, and focus more on macOS-style system-level protections for iOS
Context & Ripple Effects
This is one more entry in a running ledger of developer grievances against Apple. Earlier coverage includes complaints that beta-related App Store reviews unfairly penalize developers and, weeks after this piece, Marco Arment's charge that Apple insults developers by denying the value apps bring to iOS. Heinemeier Hansson's specific target is Apple's core gatekeeping justification: that the App Store itself adds meaningful security.
The counterpoint arrives in the same window — Apple's head of user privacy argues sideloading is 'eliminating choice' and would negate technical and policy defenses. That makes this a two-front dispute: developers questioning whether the security claim holds up, and Apple defending distribution control as inseparable from device safety.
First-order effects
- Apple's security rationale for App Store exclusivity takes a direct hit from a high-profile developer who says the claim breeds cynicism rather than confidence.
- Developers weighing whether to accept Apple's terms now have a concrete alternative demand on the table: shift security investment from store curation to macOS-style system-level protections.
Second-order effects
- Apple's privacy leadership responds not by conceding but by widening the security argument to cover sideloading — doubling down on distribution control as the defensive perimeter.
- The dispute sharpens the credibility question for every future App Store policy defense: if developers don't buy the security claim, Apple's justifications rest increasingly on choice-framing alone.
Third-order effects
- If the pattern holds, platform trust migrates from curated distribution to enforced-at-the-OS safeguards — a structural shift where the store's gatekeeping role must justify itself independently of security, or shrink to it.
The trend: Mobile platform governance is moving toward a test of whether distribution control can survive without being load-bearing for security, with OS-level enforcement as the fallback model.