Legacy decision? Would they do the same starting a new desktop OS today? Much more high risk personal data on an iPhone (e.g. health data, biometrics) requiring stricter security? Many more sensors which could be abused by nefarious actors on iOS (GPS, lots of mics, lidar, cameras, etc) and these are always with us?