This is true. The privacy threat model of an iPhone is absolute trust in Apple that has more control over your device than you do. For me, it doesn't compute.
It computes for me. It's my Trusted Computing Base, in fact. Would rather have to trust one company than several, as with Android. Can we do better somehow?
These 4-5 years may be the last era where we could trust our hardware, until governments all demand backdoors in the OS.