> Apple does not and can not scan for malicious behavior within that security framework anyway

They have been doing this since the beginning of the App Store.

We know they scan binaries for use of private APIs so it wouldn't surprise me if they are looking for other ways to get around the OS.