Apple's reasoning is that browser engines need JIT to run JS with acceptable performance, but if they were to give apps JIT capabilities, that would significantly open up the attack surface.