I'm pretty sure they're not the only ones who do that either. It's a pretty effective method to get around app sandboxes.
Unfortunately Apple and Google work extremely hard to make this somewhere between difficult and impossible.
I haven't touched iOS development in years but I believe you don't even need a dev account to publish these.
