patrickj tickled me

Was it? This has always been one of the big drawbacks of jailbreak – but having said that the Dev Team seem to continually make it easier for us as well.

Actually there's no need for the "" marks – anything that allows a hacker to remotely takeover a device with no action required on the part of users, and via a service like SMS that it is difficult to impossible for a user to turn off, IS a major security flaw. With all your 'nouse' you might know that people don't get prime time slots at the Black Hat conference – which the two researchers who presented details on this vulnerability did – for anything minor. Also, anyone with even a passing knowledge of how security exploits work, knows that there is always a gap between the time a vulnerability (security hole) is presented and the time when somebody comes out with a real-world exploit for it. So nobody with any knowledge would necessarily expect to see a documented case within 48 hours, especially as it was patched 24 hours after the announcement (making it a less enticing target).

Lastly, your 'anybody with enough nouse to JB certainly can see and defeat any attempt to hack their phone' is an absurd and completely wrong statement. Because you were able to follow a very basic set of instructions (with some JB methods) or in some cases click one button to JB, you're all set to fix up a security flaw it took Apple over a month to develop a patch for and that was unanimously termed a very significant hole in SMS? Please. Let us know your plan for fighting that on the fly with your JB skillz and you should probably be working at the very top of the security industry if you pull that one off.

Actually, we don't need an antivirus because apple doesn't allow people to install anything they want.
That's good.

I'd love Apple to let in apps like SBSettings and mQuickDo in the App Store, and hope they will gradually loosen the controls, though I probably won't hold my breath on that. I'm not sure that an anti-virus app is ever going to be a good option. Firstly, many of the worst threats these days are not viruses at all, but other forms of malware – and many times traditional AV programs are not the best defense. Also, on a mobile OS in particular, the performance hit that comes with continually running most 'protector' sort of apps is probably not one that most people would want to accept.

If apple was serious about security they'd do what every other OS does. Allow people to install what they want and recommend an anti-virus application.

It's only because of apple's own practices that we have to go through these measures.