They didn't even instrument the apps during review for the longest time. I think they recently started using an HTTP proxy to watch the connections they make.

People put way more trust in the review process and app store gate keeping than it deserves.

Thr irony that i had apps rejected for asking for personal information only stored in the app.

But having drivers license stolen is fine.

They did care enough to repeatedly pull apps when they did the same thing but in the opposite direction.