It sounds like web apps are fine as long as the code is part of the package and isn't loaded after the fact? If so, I don't see a problem. Without this policy i

It sounds like web apps are fine as long as the code is part of the package and isn't loaded after the fact? If so, I don't see a problem. Without this policy it would be impossible for them to enforce any other app policies.