Apple’s upcoming iOS 17.4 update will introduce major changes for users in the European Union (EU), like the ability to install apps from alternative app stores, sideload apps, and use third-party payment platforms.
While these changes will expand users’ choice and flexibility, they present potential security risks and pose a challenge to the safety of Apple’s tightly controlled ecosystem.
The iOS 17.4 update — set for release in March — is the biggest change to the iOS platform in over a decade. And it comes in response to the EU’s Digital Markets Act (DMA).
This update introduces functionalities that were previously restricted on Apple devices, like sideloading apps. Sideloading refers to the practice of installing apps from sources other than official app stores.
Apple acknowledged the risks these changes bring in a press release on Thursday, explaining that it will “open new avenues for malware, fraud and scams, illicit and harmful content, and other privacy and security threats.”
“That’s why Apple is introducing protections — including Notarization for iOS apps, an authorization for marketplace developers, and disclosures on alternative payments — to reduce risks and deliver the best, most secure experience possible for users in the EU,” the press release said.
Despite these measures, Apple said, “many risks remain.”
New Threats in the iOS Ecosystem
Many of the changes in the upcoming iOS 17.4 point to Apple loosening its tight control over the iOS ecosystem. Key among these changes is support for sideloading and alternative app stores, which breaks Apple’s long-standing monopoly on app distribution. Apple is also integrating third-party payment systems and alternative, non-Safari browser engines.
These changes will introduce new threats to iOS users. For instance, if alternative app stores don’t have a strict vetting process, iOS users could be exposed to malicious software. Even if app stores thoroughly review apps before they’re published, it’s easy for some malicious apps to slip through the cracks — as we’ve seen with Google’s Play Store.
Besides, cybercriminals have come up with ways to bypass safety checks on app stores. In August 2023, Google Threat Horizons revealed that one way malicious actors circumvent Play Store security is by uploading a harmless version of an app and subsequently adding malicious code to the app through an update.
Apple has always cited safety risks as the main reason it doesn’t support sideloading. In a letter addressed to US Senators in 2022 condemning proposed anti-trust bills, Timothy Powderly, Apple’s senior director for government affairs, said, “if Apple is forced to enable sideloading, millions of Americans will likely suffer malware attacks on their phones that would otherwise have been stopped.”
Users might also face an increased number of deceptive schemes due to the diversity of payment options. And, the expanded use of NFC (Near Field Communication) technology for contactless payments raises concerns about financial fraud and data interception — especially if third-party payment apps are not sufficiently secure.
Security Measures for iOS Users
To defend against the potential security risks arising from these drastic changes, Apple said it will introduce several safeguards:
- App Notarization: A baseline review for all apps, ensuring they meet certain security standards.
- App Installation Sheets: Providing detailed information about apps before download.
- Authorization for Marketplace Developers: Requiring developers to adhere to specific guidelines to protect users.
To secure your iOS devices from potential threats, we recommend you:
- Only download apps from trusted developers and marketplaces.
- Adjust your iOS security settings and use a top-rated iOS VPN for an added layer of protection.
- Exercise caution with new payment systems.
- Learn about the latest security threats.
Meanwhile, Apple has released a fee calculator for developers and new reports to help assess the impact of its new terms on apps. Check the Apple Developer Support page to start running tests on iOS 17.4 beta.
For more news, follow us on X (Twitter), Threads, and Mastodon!
