I think the line is “does this harm a human who does not consent.” Regulating autonomous vehicles? Apple being able to reject apps that steal user data? Both within reason.
But rejecting simply because it lets someone pay in an alternate manner crosses a line.