That's a nice start for Apple. But for now it indeed looks like a cookie request on any website nowadays. The real question is whether Apple is going to verify

That's a nice start for Apple. But for now it indeed looks like a cookie request on any website nowadays. The real question is whether Apple is going to verify the information provided by the app developers. Will Apple do some kind of information flow control (IFC) through taint tracking on the app code, to make sure that the user name or location is not collected as the app description says?