In theory that’s what bitcode protects against.

Today, that doesn’t save binaries not distributed through the store or ones you compiled yourself via other compiler chains.

It is possible to change that. One could even imagine it as part of the loading procedure.

https://lowlevelbits.org/bitcode-demystified/