Comment by lawgimenez

Based on the blog post, it was created February 2020 where the rules you mentioned was not enforced yet. But around that time I believe you can also export an ipa file so anyone can install but you have to include your target’s UUID in the app signature.