Fruity mobiles have been hacked multiple times. The Israelis routinely do so. Pegasus might right a bell. Jeff Bezos was even a victim.
Also, the fruit store's App Store still has malware despite the 30% they steal from developers in the name of "security".
The company also sells ads and ad placements BTW. If that isn't an indication of their goals...
Regarding bounties, they have regularly snubbed white hats and pentesters. They are one of the most wealthy companies in the world and hate paying bounties. The one I remember clearly is a dude finding exploits in their supply chain, which could've led to the attacker sending phones anywhere they wanted and emptying warehouses or adding unnecessary stock. They for nothing, yet the bugs were quietly resolved. Any adversary could thus do what the Israelis did and reroute shipments to modify material before it reaches its destination.
And let's not forget the incident where people started seeing photos on their phones from other people's iCloud, or employees repeatedly snooping on iCloud accounts, especially of celebrities, despite the data being "encrypted".
Or that time Macs couldn't function because some server somewhere was getting DDOSed?
Finally, it's a US company. The CLOUD Act and Patriot Act force(d) them to so what was decided in secret courts, without ever being given the right to expose it.
There's more, you just have to care to look for it. They are masters of marketing. That's their entire thing and you are falling for it. Remember that corps aren't here dlr you. They are here for the money. Especially big companies like that.