They can still run that app by signing it themselves with a developer account, although that's not a very convenient option. And no, this is still about what Google allows its employers to run on their corporate devices (and Apple now taking this right away from them), as users wouldn't be able to sign that app with enterprise certificate by themselves.