Err, pretty sure that was the entire premise of my post -- that you wouldn't be able to tell when they're not complying unless you audit and sign all their code before distribution.

This seems like an argument no Chinese software on American devices, what makes the difference?

No, it's the opposite argument, that we SHOULDN'T do that because one it's impractical, and two if they actually did it, the solution (mass government wiretapping and auditing and pre-censorship of all "foreign" apps) would be worse than the problem it's trying to solve (TikTok not playing nice).

I'm no fan of the CCP, but I'd take Chinese propaganda over American censorship any day.

...they haven't moved any goalposts...

You need to work on your reading comprehension.