[kwdc]

Pardon my ignorance, but doesn't Google/Apple have the ability to examine compiled code as hosted on their servers? This implies Google/Apple themselves can perform static and dynamic analysis at their leisure. There is therefore no concept of "remove just before" or otherwise a form of slight-of-hand.

Are we still operating under the illusion that Google/Apple have no capability for having suitable tooling around this? I find it difficult to believe. Especially for finding unofficial api use and similar shenanigans.