I've long held that this is one of those areas that if Apple really cared about privacy they'd disallow in-app browsers. They'd add the rule that an app that is not a browser must list in its manifest 10 or fewer domains that its webview is allowed to access. All the rest would be denied.
This would mean many apps like the Facebook App, Messenger, Google Maps, GMail, Line, WeChat, Slack, Discord, etc would effectively not be allowed to open links to the entire internet but only domains directly related to the app and would be a privacy win.
They'd have to have some wording that would have to distinguish between a browser app and a non-browser app but i'd argue that's probably not that hard to do.
This would mean many apps like the Facebook App, Messenger, Google Maps, GMail, Line, WeChat, Slack, Discord, etc would effectively not be allowed to open links to the entire internet but only domains directly related to the app and would be a privacy win.
They'd have to have some wording that would have to distinguish between a browser app and a non-browser app but i'd argue that's probably not that hard to do.