App Store has a number of manual and automated checks.

One of which is checking for private API usage which would allow developers to cause all sorts of unchecked havoc.

And because of the way Objective-C apps work i.e. dynamic dispatch you can't statically check for it in the binary when the app is launched. Nor can you realistically check it at runtime since that code path is the hottest there is and needs to be highly optimal.

I suspect that there will be an App Store SDK that third party stores will need to use that incorporates these sort of checks.