If your friend uses iOS, he's an indirect spy from the govt. A friend wants what's good for you, not spy on you to give info and metadata to the govt.
Discussion
sounds like you think using Aqua on iOS is a significant risk. If I understand you correctly, what are the threat vectors?
Assume friend uses the Aqua app while on a data VPN such as a BTC-paid anon ProtonVPN account with secure recovery email and self-custody of email storage keys.