> Other platforms don’t care if applications fingerprint the device without the user’s consent.
Isn't this supposed to be why the App Store has a manual approval process? So Apple can actually check if developers are doing malicious things?
By all means, apply extra scrutiny if an old API is in use. Maybe allow the API only in updates to old apps, and not new ones.