But the owner is able to bundle any arbitrary code into an app and run it locally on their own phone for 7 days.

Then it auto-deletes and there's nothing you can do about it.

The only class of malware that the currently-mandated friction is preventing is the kind that appears benevolent for 7 days then strikes on day 8.