I think the rule of thumb here is common sense. I know for certain a large number of med comms agencies in the pharmaceutical industry use enterprise certs for

I think the rule of thumb here is common sense. I know for certain a large number of med comms agencies in the pharmaceutical industry use enterprise certs for "internal" app distribution (think one off events, internal meetings etc. maybe needing to be run on 500 devices for 1 day only), where content may not be legally signed off/approved until 2am for an 8am start the next day. There's simply no way (other than jailbreaking) to get around this at the moment. If Apple were to start enforcing this with an iron fist, a lot of this industry (which is, believe it or not, responsible for a lot of device sales) would quickly migrate over to Android, now the devices look and function as well as their iOS counterparts. This doesn't hurt Apple's ecosystem - everyone is running Macbooks, iPads, iPhones, paying enterprise fees, etc. Most of these apps have no place clogging up the Appstore or consuming Apple reviewers time. They just don't want you buying an enterprise cert to push out your emulator bundled with illegal ROMs or illegal movie streaming app, easily downloaded by all & sundry off a public web server. This is why they put up the barriers of DUNS numbers, brief phone interviews, etc., before they will issue you an enterprise account.