Any Safari extension could theoretically do the same, even if it is available on the AppStore. I doubt app review does security audits of extensions they approve.