> I expect it to prevent attack vectors used by these APTs

It does, it just doesn't close all attack vectors used by APTs.

They say[0]:

> Turning on Lockdown Mode [...] further hardens device defenses and strictly limits certain functionalities, sharply reducing the attack surface that potentially could be exploited by highly targeted mercenary spyware.

They don't say "turn this on and you'll be unhackable". They go on to say:

> Apple will continue to strengthen Lockdown Mode and add new protections to it over time.

So what they released in the current beta is just the start. They decided that releasing Lockdown mode with only some additional protections would be worthwhile to at-risk users and I personally agree. It's both true that Lockdown likely helps at-risk users (see reply by _kbh_) and still has lots of room for improvement.

[0]: https://www.apple.com/newsroom/2022/07/apple-expands-commitm...

> Lockdown is literally presented by Apple as being for people targeted by APTs like those developed by NSO Group, therefore I expect it to prevent attack vectors used by these APTs, like exploitation of the Developer program to facilitate sideloading malicious apps. I don't feel like this is an unrealistic expectation, and not having the mode actually do that amounts to security theater, which is a far cry from decrying everything as such.

These APTs overwhelming use RCE vectors that are less obvious then side loading apps, iMessage is probably the most popular and I would hazard a guess that other popular messaging applications (WeChat, signal, telegram, etc) and safari would be next.

I had a more detailed reply to an earlier post you made - but the summary is "What constitutes an enterprise that should be allowed to have 'enterprise apps'"