Even then - apps which might want to do things like send multicast packets (very useful in lots of home automations situations) can't do it, using the developer program, without going through approval on the store.

You utterly do not own those devices. Apple sells a house where they kept the keys to all the locks, but people think it's ok "because they'll keep me safe and unlock my doors when I need them to!".

Nevermind the risk is mostly a marketing boogeyman in the first place.