Google is able to use Play Protect in similar ways as Windows Defender, and the system can prevent malicious apps from installing or running based on signatures, profiling, certificates, etc. Just as iOS uses code signing and signatures to decide if an app was installed via the App Store, Android can do something similar, and more, to prevent malware from running.
> Right, but for Apple to take down those apps, it's much easier than taking down some random link the fraudsters put up.
Seems like the issue here is that the government has to tell iOS users not to install specific apps because Apple hasn't taken them down. I'm sure it's easy for Apple to do what it wants on the App Store, the issue is making them care. They have a history of letting multimillion dollar scams flourish on the App Store[1].
I'm not saying iOS is 100% bullet proof. I'm saying the problem is much more manageable without sideloading.