[dimask]

You _can_ disable automatic updates and install updates manually. This is what I actually do, ironically for this very exact risk about the Raivo app. I like raivo, but since it was bought by this shady guy, I thought that by blocking automatic updates I could use the app without risk of some shady update coming. The only issue is that this is all or none; meaning that from time to time I have to go through my list of apps and manually tap on the upgrade button. So glad for that decision now.

[modeless]

"Install updates manually" isn't a very good description of your options here. You can take or leave the updates they choose for you. You have zero ability to inspect or audit said updates, or choose different updates yourself, or go back to previous updates. Rejecting updates may very well leave you exposed to security vulnerabilities and there's nothing you can do about it other than accept the updates or delete the app. And if you want the data stored in the app, you have no option to retrieve it other than what the app developer provides, because Apple prevents you from reading the data stored on "your" phone in any other way.