The Ledger Live and Freecash incidents remind us that whatever Apple's app-vetting procedure is, it's not working.