Any App can access it. By AGB's the Apps are required to not abuse it. But there is a long track record of Apps which where clearly found to abuse it, and giv

Any App can access it. By AGB's the Apps are required to not abuse it. But there is a long track record of Apps which where clearly found to abuse it, and given that finding so requires advanced skills most which do where probably not found. A well known example was if I remember correctly TickTock. Furthermore abusing the id (literally braking the developers app store AGBs/contract) has rarely any consequences. Apps are often not even temporary removed from the app store.