The App Store is an app delivery mechanism. The same application sandboxing, API access restrictions etc. can all apply even if they allow sideloading. In fact that's already possible today through their enterprise deployment program.