iOS 17—iPhone Sideloading Is Coming, But How Safe Is It?

Apple’s iOS 17 will launch in June at the iPhone maker’s Wolrdwide Developers Conference (WWDC) along with some brilliant new features. According to predictions, iOS 17 will also include one of Apple’s biggest changes to its iPhone software—the ability to “sideload” apps from sources other than its App Store.

The iOS 17 change is a major move that has been in the making for a while. In fact, Apple doesn’t really have a choice about it—regulation the EU’s Digital Markets Act (DMA) requires gatekeeper companies to open up their platforms to other companies. Bloomberg’s Mark Gurman says Apple’s iOS 17 will enable this by the start of 2024.

The U.S. is also considering similar regulation that would force Apple to allow sideloading.

Apple’s famous “walled garden” helps the iPhone maker secure your device because it means it owns the entire ecosystem of hardware and software. Sideloading opens this up, which Apple has warned will have implications for security and privacy.

Apple’s walled garden approach contrasts with Google’s Android devices, which already allow sideloading and require extra protection to keep them safe.

Sideloading could prevent jailbreaking

Those in favor of removing the current restrictions on sideloading argue that it will even the playing field for app developers, stimulate innovation, and benefit smartphone users from a wider selection of apps. The iOS 17 move takes away the need for users to “jailbreak” their devices in order to sideload apps—a process that leaves devices more vulnerable, says Cian Heasley, security consultant at Adarma.

But if Apple does allow people to sideload apps in iOS 17, it raises potential security concerns, he says. For example, a sideloaded app that hasn’t been rigorously vetted could potentially contain malware or unwanted tracking tools.

“While the app may be uploaded by the developer without malicious content, it could become corrupted or compromised. Similarly, if the sideloaded app doesn’t automatically update or send out push notifications to alert of software updates, the onus will be on the users to ensure their device is up to date with the latest version.”

iOS 17 sideloading could increase attacks on iPhones

Experts also think the iOS 17 change could encourage criminals to ramp up iPhone attacks—something that’s a real risk as emergency updates such as iOS 16.4.1 and spyware continue to target Apple’s devices.

“The introduction of sideloading capabilities will lead to an increase in malware targeting Apple devices,” says Lewis Duke, threat intelligence lead at Trend Micro. “As sideloading bypasses the application review process that app store vendors typically perform, sideloaded applications may not have undergone the same level of scrutiny and testing as those available through the official app store. This leaves a device vulnerable to malware and other security threats.”

To combat this risk, he thinks from iOS 17 onwards, it’ll be a good idea to use anti-virus apps applications to maintain a secure iPhone.

Sideloading “puts security in danger”

Vykintas Maknickas, a product strategist at NordVPN says people “diving into sideloading” in iOS 17 without considering the risks are putting their security in danger. “Many malicious actors use third-party app stores to distribute harmful software, such as viruses and malware,” he warns.

Brian Higgins, security specialist at Comparitech is concerned that iOS 17 support for sideloading will “inevitably weaken existing protections for Apple users.”

“A quick dive into app security research shows that sideloaded Android apps are currently anywhere between 15 and 47 times more infected by malware—so that’s what Apple users have to look forward to if they intend to take advantage of this new feature,” he warns.

Apple security should be maintained, says expert

However, Ross Higgins, senior penetration tester at IT Governance is more confident Apple can maintain security despite the iOS 17 move. “Apple has a good history of prioritising security in its operating system. Modern Apple devices use a secure enclave for storing and processing sensitive data, such as passwords. This isolates sensitive data from the main operating system and can only be interacted via an API. IOS apps are also run in a sandboxed environment, limiting their ability to interact with other software installed on the device.”

Considering these features, he thinks people’s data should “remain safe from any malicious apps that may be introduced via sideloading, without the need for an antivirus solution.”

The launch of iOS 17 is just a month away, so will you be sideloading on your iPhone? Let us know in the comments.