Apple can and has threatened to pull apps from the store for unscrupulous behavior. Absolutely no one is claiming that the app store itself provides protection. It's the fact that Apple can decide who gets to publish on a device that over a billion people use.

I'm also not really sure how OS level protections would prevent an app from sending out data it shouldn't. Apple is acting as a regulator here because no one else is.