https://bugs.webkit.org/show_bug.cgi?id=254545
It's a bug that's been open for years and happens to be beneficial for the app store.
So random websites can actually do this, but not websites the users specifically installs as a PWA, which is kinda the opposite of what you would expect.
For every privacy feature Apple advertise to consumers about, there are ten they didn't, that still very much raise the bar.
The quiet improvements are so under-marketed that even technically savvy users aren't aware of most of them.
There was a period before MDM matured that certain three letter U.S. Gov agencies forbade iPhones. Not because they were insecure, but because the agency's infosec team couldn't surveil the devices or break in to do a data dump if the employee was under investigation.
Certainly, they still have zero days, and vulns dating back longer than anyone would like. So it's interesting what's happening to iOS use of C: https://blog.timac.org/2023/1019-state-of-swift-and-swiftui-...
While Apple may have features to ensure that only you have access to your phone. They still run a very large ad network.
Like Google has a lot of features to avoid other people from logging into your account. That doesn't mean they don't track your activities and centrally log it.
If you expect perfection you are always going to be disappointed.
Cops Suspect iOS 18 iPhones Are Communicating to Force Reboots
https://www.magnetforensics.com/blog/graykey-supported-mobil...
So the cops keep all phones plugged in and unlocked at all times to prevent them from re-locking?
If they never reboot, then the phone can just be kept powered and isolated for years if need be to find an exploit in the AFU (after first-unlock) decrypted but screenlocked state.
Cops suspect iOS 18 iPhones are communicating to force reboots - https://news.ycombinator.com/item?id=42081874 - Nov 2024 (282 comments)
This will unlock the device.