Apple already has a similar practice in place for desktop apps with Notarization, does it not?
I don’t see how we can’t get to a point where we have something similar for iOS. They can limit the APIs they have access to and the User has the choice.
The question is if all computing platform should be forced to offer this possibility or not. I don‘t think it‘s clear cut and some kind of „vetted“ side loading seems like one possible solution. You would still need to expect to pay Apple for the vetting, though.