FWIW, I believe that all TestFlight app releases also undergo the automated portion of the App Store approval process, which would be able to catch entitlements.

If you're installing from source, that's another thing.

Correct. This is why iSH cannot dynamically generate code like say UTM can and must use software emulation via a threaded interpreter.

Yeah, a Linux shell is not what I would call "basic everyday software" that I need to run in my phone.

I need ssh and git for a lot of everyday stuff personally.

Also a decent text editor shouldn’t be considered unusual software.