Kind of. They cannot prevent private API used by their frameworks running in the same process as the app (e.g. an app can use an Apple UI widget, for example). Things that apps should generally not be able to do have already started being locked down using entitlements, which prevent third-party apps from using those APIs regardless of whether they can sneak it past review.