I like apples hardware and focus on privacy. Their app sandboxing is great and i feel comfortable putting my nsec in damus

Are supply chain attacks possible in that ecosystem though?