The presentation video was released after the update was submitted to the store with the contents hidden and activated later.

As for whether the update was malicious for the end user, we could say we trust epic to operate a payment method, and therefore the update was not malicious.

But there are many actors who would use this exact same methodology, and the update is malicious. Such Trojans exist on Android.

Security policies always prevent behaviors that could be used for non-malicious purposes.

If the argument is that the end users should be the ones to decide, it’s really just another way of saying that Apple shouldn’t be allowed to enforce any security policy.

Of course there are those who believe that Apple shouldn’t be able to enforce security policies, but there is no overreach here.