The post-approval switcheroo is similar to the Office&#x2F;SharePoint app stores - really all the &#x27;app&#x27; is is a delegation of permission. If your app can change and operate within the permission you&#x27;re initially granted during &#x27;installation,&#x27; you can really do anything you&#x27;d like in the actual application itself. A rather large hole.