* The limiting factor of this attack is that a marketplace must first be approved by Apple before it can undertake this sort of tracking. *

Seems like a Catch-22 that Apple is required to support these other marketplaces out of their control but simultaneously expected to prevent them from behaving badly.