App Store review can only do minimum security level check in reality. And actually there&#x27;s not much they can do either. Let me give you 3 examples:<p>1) Hybrid apps that most contents are actually webpage, such as the tripadvisor app and at&amp;t app at some point (not sure if it&#x27;s still hybrid today)<p>2) Games. You can load new code as static files or contents, then the app parse and execute the code as a new update. This is quite common in mobile games. As games require frequent update like once or more per week, it&#x27;s really an unwanted workaround to fulfill the update frequency requirement.<p>3) Do you remember&#x2F;know the case recently that some hacker released a &quot;poisoned&quot; version of xcode and apps written by that xcode &quot;automatically&quot; contains code sending user info to that hacker?