Being able to run a program on an OS is the bare minimum. Anything not signed by Daddy Apple, you have to add an exception. The moment the exceptions are no longer enough to "protect the user against themselves," you can't do a thing. Why? Because it's a fully closed, walled platform.
It's like being in prison and being told you're free because you can walk in the yard.