Shipping 100 hardware units in under eight weeks

The fact that you need to install a hardware device to fake tap inputs is really sad. It should just be possible to install an app on your phone and check a box that says "let this app pretend to be me in a way that is indistinguishable for all other apps". Of course, users must be protected from malware, and app publishers must be protected from users who want to interact with their apps in an automated way. Somehow that all overrides the underlying truth that users should be in control of their own systems, and leads to hacks like this to bypass it.

Android supports this functionality with the name of Accessibility.

Id prefer the world we have currently - apple is generally good at security for most people who never even want to think about. IMO it’s like seatbelts, maybe mildly annoying but bet a huge positive. If we sold cars without seatbelts, people would definitely buy them without realizing the costs.

Clearly you haven’t seen an older person’s Android phone. One time had someone come to me with an Android phone that played forced fullscreen unexitable ads every few seconds through some obscure permission that you can’t even prompt for (i.e. user has to go to settings and enable it in an unusual spot). I get why the overlay permission would exist but honestly it’s not worth it. I can’t imagine what would be done by even a single malicious app slipping through with a “literally see and control your entire phone” permission