There’s a theory that scams like this are intentionally badly written (typos etc.) because people foolish enough to fall for obvious scams are more likely to pay up. Scammers don’t want to waste their time arguing with smart people.
Legitimate companies do not use scare tactics. They would also not tell you to install something in response to a security risk, because that in itself can be an additional security risk. If you don't believe people here, then contact Apple and ask them. They will tell you something equivalent or similar to what I just stated.
I know someone will bring up the example of Windows, but I think it's nonsense when they do this too.
The url should be enough to give it away anything apple related would come from Apple.com and be via a https connection, on iOS it should be green padlock with Apple, Inc in the navigation bar url field.