The parent comment isn’t about remote attestation. It was a claim that since the iPhone isn’t bulletproof then all security must be pointless.

When the reality is the iPhone is actually quite a good example that great security is possible with enough investment.

(I’ll bite and try to steelman) How does a typical user verify that they are running the intended secure software?