Apple confirms it's breaking iPhone web apps in the EU on purpose

Apple’s decision to disable home-screen web apps (PWAs) for iPhone users in the EU has triggered sharp debate over whether it is a legitimate security response to the EU’s Digital Markets Act or a form of “malicious compliance” to protect App Store revenues. Commenters scrutinize Apple’s claim that supporting PWAs with third‑party browser engines would require an impractical security re-architecture, noting that Android and desktop platforms already manage similar models. The exchange broadens into a clash over platform lock‑in, user freedom versus safety, and whether aggressive EU regulation is a necessary check on dominant tech firms or a brake on innovation.

Apple’s stated rationale

  • Apple says Home Screen web apps (PWAs) on iOS have deep, WebKit‑specific integration with OS‑level security: per‑site storage, permissions, and isolation like native apps.
  • Allowing alternative browser engines under the EU DMA would require a “new integration architecture” to preserve those guarantees.
  • Claims:
    • Without that, a malicious web app could access other web apps’ data or permissions (camera, mic, location).
    • Non‑Safari browsers could silently install web apps.
    • Rebuilding this for all engines wasn’t “practical” given DMA work and “very low” PWA usage, so they removed Home Screen PWAs in the EU.
    • EU users can still add bookmarks to the Home Screen, but these open as normal browser tabs.

Critiques and accusations of bad faith

  • Many see this as “malicious compliance” and a tantrum to undermine the DMA and punish EU users:
    • Deliberately degrading iOS to avoid giving competitors (and PWAs) equal capabilities.
    • Conflicts with Apple’s long‑standing use of PWAs as a legal talking point (“use the web instead of the App Store”).
  • Technical pushback:
    • PWAs use the same web APIs as sites; the main extras are full‑screen display and more persistent storage.
    • Browsers already must isolate sites and manage permissions; Android and desktop OSes allow multi‑engine PWAs without catastrophe.
    • If third‑party browser PWAs were risky, Apple could warn users, restrict capabilities, or only enable PWAs for engines that pass security criteria.
  • Several call Apple’s security story “FUD” and financially motivated: PWAs can route around the App Store and its 30% cut/Core Technology Fee.

Support for Apple’s stance

  • Some argue the concern is legitimate:
    • iOS security is designed around Apple‑controlled components; letting arbitrary engines host quasi‑apps expands the attack surface.
    • Apple bears brand risk when anything bad happens on iOS, even in third‑party code.
    • Browsers are huge, bug‑prone codebases; adding per‑PWA isolation across arbitrary engines is non‑trivial.
  • Others prioritize iOS’s “Just Works” security/UX and don’t want more openness; they say PWA users are a small minority.

Impact on developers and users

  • PWA‑heavy developers (internal tools, line‑of‑business apps, small SaaS, “home‑cooked” apps) say this is a major blow:
    • They rely on PWAs to avoid App Store review, fees, and distribution overhead, and to support mixed iOS/Android fleets.
    • Losing full‑screen, notifications, and durable storage in the EU breaks real deployed apps (including some in healthcare).
  • Some EU users and devs say this pushes them toward Android/Pixel or FOSS phones; others stay with Apple reluctantly.

DMA, competition, and regulation debates

  • Ongoing argument whether this complies with the spirit of the DMA:
    • One view: treating all engines equally by deleting a feature is formally compliant but clearly undermines interoperability goals.
    • Counter‑view: DMA cannot force Apple to add or keep features, only to avoid discriminating between engines; removing PWAs is within their rights.
  • Broader political split:
    • Pro‑DMA commenters see Apple/Google as gatekeepers with lock‑in and network effects; regulation is needed to make switching and interoperability real.
    • Critics say the EU “only legislates, doesn’t innovate,” and heavy rules (DMA, GDPR) stifle startups and tech progress.
  • Some predict EU investigations and fines; others doubt the EU’s appetite or ability to “break up” or ban Apple.

Bigger themes

  • Strong resentment toward Apple’s growing control, lock‑in, and perceived hostility to open standards and user/device ownership.
  • Defenders emphasize that many mainstream users don’t know or care about PWAs, and will accept Apple’s trade‑offs for security, polish, and ecosystem integration.