> And again with Objective-C it's impossible to prevent private API usage unless you have some sort of App Store model which can inspect the binaries and prevent abuse.

A alternative is to sandbox applications to prevent them from calling anything else than the official API, and to use a less restrictive sandbox for applications signed by a key owned by the vendor.