Apple does allow personal loan apps, but sets limits on interest rates and repayment deadlines (≤36% APR, ≥60 days) which effectively ban the type of app at issue here. Requesting permissions to all of the user's contacts and photos in a loan app wouldn't pass review, either, and the fact that Apple doesn't permit sideloading is an effective block against the "subway flyer" tactic.

If you are getting a quick, small loan in Mexico, you probably don't have an iPhone because they cost multiple times as much as an Android one. So, it's not worth it to make these apps for iPhone users because that demographic is totally the opposite of what you want.

More important, Apple reviews all new apps going into the App Store. One of the rules is that you're not allowed to request more permissions that what the app actually needs. A loan app requesting all this info would never fly because it won't pass the human review. Also, it would be incredibly hard, if not impossible, to reupload an app that was banned under a different name - they have automated checks for this