The regulation allows for apple to still do malware scanning and blocking on apps installed even by third party stores. Google also does the same thing, this point is a nothingburger.
The human review part of the app store review does nothing to catch viruses.