This is what I mean. What you’re describing can happen on the Mac because the sandbox isn’t always enforced, and you can also escalate an app’s privileges to full “root" capabilities if you enter an admin password during an installation.

On iOS this can’t happen, regardless of whether an app was downloaded from the App Store or elsewhere.