You sound like a person who's never had their app pen tested. The attack surface is anything but small if you're working with any kind of sensitive data.

But what if someone discovers a iOS 0day worth several million dollars and burns it to compromise your app specifically? /s