That position is unfortunate. Keeping in mind the OS as default shares no personal information and none is required to install etc I don't know how that is LARPing.

In regards to what people choose to do beyond the initial install they obviously have to develop their own threat model and take ownership of what permissions and information they voluntarily provide each app and service.

That however is outside of the OS control.

The OS itself goes a long way to help people and this can all be read in our documentation.

If there is anything specific within the bounds of the OS itself and not based on user behaviour that you wish to discuss please reach out and let me know.