That seems entirely legitimate and in no way harms the consumer, which is what the app store is always claiming to prevent.
You bought it, you get to chose what code runs on it, and DRM shouldn't be used to prevent that.
You bought it, you get to chose what code runs on it, and DRM shouldn't be used to prevent that.
It is not because the apps were nefarious.
The Apple Enterprise terms simply state you cannot distribute to the general public. It doesn't matter that the app was terrible, the violation itself was much more boring.
The FB app targetted young people and literally installed a VPN profile that routed all internet traffic through Facebook servers.
Essentially full network packet-capture of everyone who installed their app. That's the definition of nefarious.
The enterprise certificates were revoked primarily because they violated the #1 rule of the enterprise account - do not distribute outside of your company.
As long as user consented, the app should be allowed to do anything.