> I would not believe in anything they promise.

This is exactly my point – there's very little trust needed because Apple can verify/audit one company far more than they can the millions of registered developers.

I'm not saying I agree with it, I'm saying I can understand why they did it, why it works, and that it's likely possible to do safely.