While that's probably true, Apple could bring to iOS what macOS has been doing for years: code-signed apps that aren't distributed through the App Store and aren't subject to any of the App Store's restrictions (and can't guarantee the ostensible security benefits), but can still be "disabled" by Apple if they prove to be bad actors. On macOS, there are actually three states for this: signed App Store apps, signed regular apps, and entirely unsigned apps. Users get to tell the system what to allow and disallow. There's no really good technical reason for Apple not to allow at least the first two categories on iOS by now.
(That system on macOS is, for those who don't remember, called Gatekeeper!)
> There's no really good technical reason for Apple not to allow at least the first two categories on iOS by now.
But then I can sign a jailbreak with my developer certificate and pass it around. Now, you're going to say that such a thing has never happened on macOS, but the fact that it could happen because you've opened the door to it is something that should be considered.
iOS doesn't allow this because Apple makes shitloads more money from mobile than desktop. They recently blocked Valves app from iOS because it allows you to stream games from another device which puts apples cut from the app store at risk. They don't care about steam on OSX because they make so much less money there.
To be clear, Apple's published statement is that it was blocked because it lets you purchase games through the app, which has been forbidden since day 1.
They also state they are continuing to work with Valve to get it published (presumably with only the feature to play existing purchased and free content, like say the Kindle app)
(That system on macOS is, for those who don't remember, called Gatekeeper!)