> Enterprise apps still phone home to the mother ship (Apple) and will refuse to run if, for example, the device doesn't have an internet connection for some number of days. (90 if memory serves.)

I would not be surprised if the list of apps that a user has is not disclosed to Apple, and the only thing that is exchanged is Apple's "blacklist" of revoked certificates.