Why the Open App Markets Act Matters?
Why the Open App Markets Act Matters
Episode Notes:Join us on "Upwardly Mobile" as we delve into the critical issue of how Apple and Google's dominant control over the mobile app ecosystem is stifling innovation in mobile app security and potentially increasing long-term consumer cyber risk. While both companies, especially Apple, are currently seen as doing a "reasonable job" with cybersecurity within their closed environments, experts warn that this "monoculture protection" is not sustainable against evolving threats from nation-states, criminal groups, and AI.The Problem with App Store Monopolies: The core argument is that monopolistic behavior naturally suppresses innovation because there's little fear of competition. This has led to a situation where innovative mobile app security startups are struggling to achieve the growth and valuations seen in other cybersecurity sectors like cloud and API security, despite the central role mobile apps play in our daily lives. This concentration of security responsibility with just two companies puts all our "defensive eggs into one basket".A prime example is Google Mobile Services (GMS), which maintains a strong hold on Android mobile apps, making it difficult for external security vendors to compete effectively. The sources highlight that Apple and Google's solutions are specific to their closed ecosystems, lacking incentive for crucial cross-platform security initiatives.The Solution: The Open App Markets Act (OAMA) The bipartisan Open App Markets Act was introduced by U.S. Senators Marsha Blackburn, Richard Blumenthal, Mike Lee, Amy Klobuchar, and Dick Durbin to address these concerns. This landmark legislation aims to set fair, clear, and enforceable rules to promote competition and strengthen consumer protections within the app market by curtailing Apple and Google's "gatekeeper control".
Key Provisions of OAMA:
- Protecting Developer Rights: Developers would be empowered to inform consumers about lower prices and offer competitive pricing outside the app stores, without fear of penalty from Apple or Google.
- Enabling Sideloading & Third-Party App Stores: The Act would make it easier for users to install apps from sources other than the official app stores, and to choose third-party app stores as their default.
- Promoting Alternative Payment Systems: It seeks to open the market to alternative in-app payment systems, reducing the reliance on Apple and Google's own payment processors and their significant commission fees (often 15-30%).
- Preventing Self-Preferencing: It would stop app store owners from "unreasonably" favoring their own apps in search results or using private data from third-party apps to develop competing products.
- Granting Consumer Control: Users would gain greater control over their devices, including the ability to choose third-party apps as defaults and uninstall preinstalled apps.
- Security & Privacy Safeguards: The bill includes provisions allowing app stores to take actions "necessary to achieve user privacy, security, or digital safety," provided these actions are applied consistently and are narrowly tailored.
Support & Criticisms:
The Open App Markets Act has garnered strong support from numerous technology and consumer groups, including Spotify, Epic Games, the American Economic Liberties Project, and the Coalition for App Fairness, all advocating for a fairer, more competitive marketplace. They argue it will lead to lower prices, more innovation, and increased consumer choice.However, Apple and Google are predictably opposed, raising concerns about potential security risks associated with opening up their platforms to sideloading and alternative app stores. There are also ongoing debates about whether the bill could inadvertently affect content moderation by potentially penalizing companies for exercising editorial judgment.Recommendations for Moving Forward: Beyond legislation, the authors of "Apple and Google are Suppressing Innovation in Mobile App Security" offer concrete recommendations for Apple and Google to foster a healthier mobile app security ecosystem:
- Facilitate Third-Party Security Vendors: Open their ecosystems to third-party mobile app security solutions through certification and partnership models.
- Incentivize Developers: Financially reward developers who invest in robust security measures, potentially through reduced commission rates.
- Adopt Open Standards: Transition to widely recognized open standards for mobile app security evaluation, such as those developed by OWASP, and extend this to mobile payment systems.
These steps are crucial to ensure that the rapid evolution of cyber threats is met with equally rapid and diverse innovation, protecting consumers and society at large from future mobile app breaches.Sponsor: This episode is brought to you by Approov. Learn more about their cutting-edge mobile app and API shielding security solutions athttps://www.approov.io/.
Keywords: Mobile app security, Apple App Store, Google Play Store, monopoly, innovation, competition, Open App Markets Act, OAMA, sideloading, third-party app stores, alternative payment systems, cybersecurity threats, consumer protection, developer rights, digital economy, antitrust, tech regulation, privacy, OWASP, GMS.
- Approov:https://www.approov.io/
- TAG Infosphere:https://www.tag-infosphere.com/
- NYU Center for Cybersecurity (CCS):https://cyber.nyu.edu/
- DOJ lawsuit against Apple monopoly:https://www.theverge.com/2024/3/21/24105363/apple-doj-monopoly-lawsuit
- Wired on Google's app store monopoly being ruled illegal:https://www.wired.com/story/googles-app-store-monopoly-ruled-illegal-jury-epic/
- DOJ report on AT&T divestiture:https://www.justice.gov/archives/atr/att-divestiture-was-it-necessary-was-it-success
- Apple's Platform Security:https://www.apple.com/business/docs/site/AAW_Platform_Security.pdf
- Google's Cybersecurity Story:https://safety.google/stories/micklitz-pietraszek/
- NowSecure on mobile app breaches:https://www.nowsecure.com/mobile-app-breach-news/
- OWASP® Foundation:https://owasp.org/www-project-mobile-top-10/
- Spotify vs. Apple commission fees:https://forums.appleinsider.com/discussion/233654/spotify-speaks-out-against-apples-30-commission-fee-again
- Epic Games vs. Apple App Store saga:https://appleinsider.com/articles/20/08/23/apple-versus-epic-games-fortnite-app-store-saga-the-story-so-far
- Cybersecurity startup valuations:https://www.finrofca.com/news/cybersecurity-startups-valuation-and-multiples-2024
- GMS vs. Non-GMS Android apps:https://emteria.com/blog/gms-vs-non-gms/
- Epic vs. Google trial verdict:https://www.theverge.com/23994174/epic-google-trial-jury-verdict-monopoly-google-play
- Huawei revenue despite US sanctions:https://www.cnet.com/tech/mobile/huaweis-2023-revenue-soars-despite-us-sanctions/
- Xiaomi:https://www.mi.com/us/
