This seems like it would be a sizable target for ransomware. Why include an encryption program if you can have the OS do it?

All the ransomware needs to do is make iOS think it's a payment provider.