pull down to refresh

How does apple allows non official (malicious apps) on IOS store, but forbids damus from zapping?