What does vibe coding add here? How is this any different than just arbitrary code execution on device, which is exactly what this gatekeeper rule covers?

(Not commenting on the rule, just want to see what’s new here)

The only thing it changes is the audience. Developers are an insanely small subset of iPhone users but these applications are targeting everyone else.