Apple already has a similar practice in place for desktop apps with Notarization, does it not?

I don’t see how we can’t get to a point where we have something similar for iOS. They can limit the APIs they have access to and the User has the choice.