The post-approval switcheroo is similar to the Office/SharePoint app stores - really all the 'app' is is a delegation of permission. If your app can change and operate within the permission you're initially granted during 'installation,' you can really do anything you'd like in the actual application itself. A rather large hole.