Aren't most of those 0-days exploiting iOS integrated apps and thus outside the realm of App Store curation and policy?

Asking because that's the impression I get, but may be wrong.