The security reality does not match Apple s marketing/advertising and, as the Pwn2Own exploits show, the company is running around in circles trying to keep hackers at bay. Apple needs to swallow hard and hire a security chief with experience in running a mandatory Security Development Lifecycle for all Internet-facing software. This would help with things like threat modeling, mandatory training for developers, implementation of security mitigations and, more importantly, software products and OS refreshes that can withstand security scrutiny.
Source: https://threatpost.com/apple-desperately-needs-an-sdl-program/91700/