In practice I’ve seen apps just game the system by (1) using IAP using the normal flow, and (2) giving user a button unrelated to purchasing that would open a new WebView, which just happens to contain a purchase button.