The near-complete inability to revert the permission is what argues against this. You could get this past a security team if you had the ability to revert it an

The near-complete inability to revert the permission is what argues against this. You could get this past a security team if you had the ability to revert it and Apple could document it away. It is the fact that it is a non-revertible thing (in any reasonable manner) that is the key here. The odds that there's some way to chain this in an interesting way are just too high, even if the security team couldn't immediately come up with it.