Apple mainly checks for obvious malware API calls on device, it would really be out of its scope to check the backend security for every app ever.

This is why Apple security theater leads people to a false sense of security.

Better to make secure operating systems that inform users of bad access patterns and let the developers be free to produce.

Nothing protects you from giving info to a broken backend though, so people should be more cautious and repercussions for insecure backends should be higher.

I don't think the App Store provider should be blamed for a security posture that is just wrong by design. The company is responsible to guarantee a meaningful degree of security for their user data.

nobody does a free security checkup xD not even apple