Ipad antivirus question

securityguy

*The Mac app store and OS X version of Mavericks and above (Yosemite) also enforce this protection by default.*

Not very well, however. The exec() system call isn't protected, and the machine will execute any binary or, worse, any script starting with #!, without question, no matter how tightly you set Gatekeeper.
What you can't do with those options set to maximum is download a .app bundle, install it, and then launch it from the Finder (or with the "open" command, which is the same API). That protects you from "rogue" applications being served from online sources, but it doesn't provide any useful protection against malware which uses alternative routes onto the machine.