Drive-by-downloads have been attacking iOS devices for years.
Uploading everything from images to current location to passwords contained in your keychain.
https://www.theguardian.com/technology/2019/aug/30/hackers-monitoring-implants-iphones-google-says