> From the link you posted it wasn’t clear that it could intercept anything.

That's Apple's fault if the permission screen didn't show that. What the app actually collected was different from what it had OS permission to collect and was clearly described to the user.

The whole idea of a development certificate is that it is suppose to be used for internal use where a corporation can deploy an app to employees that can do all sort of weirdness.

And employees should also be informed, just like Android informs them.