That's correct. Additionally, although there are many ways to work around these static code checks Apple performs at app review time (due to Objective C's runtime capabilities), you can bet an app as popular as f.lux would get pulled very quickly with potentially long-term damage to their relationship with Apple*
If I understand correctly, they can't do so since they are using undocumented APIs that they are not allowed to use in store apps.