Not sure what you want Apple to do here.

They have no visibility into what companies are doing with enterprise certificates. The whole point of which was to allow internal apps to be built that Apple should have no knowledge of.

They did the best they could which is to revoke the certificate once they learnt of egregious behaviour.