Except even with a third-party app store Apple still has control over what permissions apps need as well as the developer API itself. So it's not clear to me th

Except even with a third-party app store Apple still has control over what permissions apps need as well as the developer API itself. So it's not clear to me that a third-party app store can ignore privacy without getting a user to click Allow to whatever privacy violations the API permits. I guess Apple can no longer enforce that apps can't use parts of the internal API that leak, so a third-party app store might get around some things that way but it seems they are still quite limited in options.