Idk what their vetting includes but I doubt it's a full security audit of the codebase of each app for example and so without something like that why would you ever expect a 3p app to get the same permissions as an Apple internal one?
Which essentially makes the phone a brick and unusable for 99% of consumers. Average users don't care about your weird esoteric privacy and security concerns.
