To be clear, this app that was just removed WAS just a reskinned Onavo app - same code and "ONV" class prefixes, etc.: https://twitter.com/chronic/status/1090394419902197761
Facebook got caught, and then they tried to use their enterprise cert to get around App Store review because they knew it would get rejected.