“There were three releases since then and they broke their promise each time.”
A researcher reported four iOS bugs between March and May. Three were still live in iOS 15. Any App Store app could read your contacts’ interaction history and an Apple ID token without a prompt. Apple quietly fixed the fourth and left it off the security notes. Apple sells privacy. Its bounty program sat on the bugs for months.