Isn't that what the AppStore review process is for?
Or why not provide an extra approval process for the NFC API?
On the other hand they were not so concerned with bad actors when releasing AirTags.
Feels more that it's about control than safety and like that kind of decision that got them into all the antitrust probes in the first place.