If the entitlements system wasn't there, anyone could access "dangerous" private APIs by just using the objC runtime.

This way, only apps signed with the appropriate entitlements (usually system apps) can run those calls...