That seems to be saying updates should go through the app store, rather than blithely downloading and running random bits of code. It doesn't rule out somethin

That seems to be saying updates should go through the app store, rather than blithely downloading and running random bits of code. It doesn't rule out something like Pythonista (which is great!) that lets you write/run your own code (which doesn't change the app itself).