But if they can't, then what you said was basically wrong. The app store totally lets you make malicious applications. Seems like security theatre to me.