This isn't so clear-cut and open to interpretation. To me it sounds like this would be referring to technical limitations like the ones already put in place by the OS - ie prohibiting a third-party "Settings" app with "root" capabilities or a "file manager" app able to access data across all other apps would be fine.
Apple themselves explicitly approving each installable app does not seem strictly necessary and proportionate.
Apple themselves explicitly approving each installable app does not seem strictly necessary and proportionate.