I'm not going to argue regarding the potential security issues of using a solution like Rollout or CodePush, but I do think Apple should have done a better job at communication.

Dave Verwer from iOS Dev Weekly said it much better than I can:

"We still only have anecdotal evidence on what has actually happened and while that continues both the creators of these tools, and the developers who are using them are left in this difficult/impossible situation of not knowing what's going to happen to their apps. It'll probably take a couple of weeks to see full impact of this, and I really feel do for you if you have an app that's being affected by the changes.

People build businesses on the App Store and to have the possibility of changes like this being enforced with zero notice after years of them being fine on the App Store is completely unacceptable in that situation. If this change is intentional (which we can only assume it is) then it should have come with a detailed description of what's happening and a notice period to give app owners a chance to react and continue to run their apps.

Apple can definitely do better at handling situations like this.

Dave Verwer"

Taken from https://iosdevweekly.com/issues/291#start

FYI, I work for Rollout

Even w/o hybrid platform, developers today are loading js assets remotely, and basically inject new code - All THE TIME.

what Apple did is just flagging the ones that are most upfront about it, but everyone can do it, hence the rollout suggestion IMHO

https://blog.bugsnag.com/react-native-plus-code-push/