Oddbean new post about login | logout If your friend uses iOS, he's an indirect spy from the govt. A friend wants what's good for you, not spy on you to give info and metadata to the govt.
sounds like you think using Aqua on iOS is a significant risk. If I understand you correctly, what are the threat vectors? Assume friend uses the Aqua app while on a data VPN such as a BTC-paid anon ProtonVPN account with secure recovery email and self-custody of email storage keys.
No I'm referring to iOS itself
threat vectors are pretty basic opsec questions