Added to bug report. I don't know what the way forward will be, but I suppose any changes in behaviour here will take a long time to reach users, so maybe direct distribution will have to do for now. I will at least refer to our discussion if the next build is rejected as well. What is odd to me is that the first version of the app, which is on my personal developer profile, was accepted. It was only rejected when we tried to upload the same app to a company profile. I suppose it might just come down to individual verdicts, and might be off-topic for this thread.

Context for what we're trying to do: Apple has not implemented FIDO2 support over BLE, so we decided to try and make our own, following the framework we did for Linux. In short: create a virtual device with the HID descriptor of a FIDO device, receive data from browsers, etc., through the system with the HIDVirtualDeviceDelegate class, repackage these and communicate over BLE, receive an answer, repackage back to USB HID packets, and send back to the system with dispatchInputReport. Since this communication goes back and forth, we need to be able to both receive and post events. I assume this is how the PassKeez project I mentioned in the initial post could use it as well. This might be something Apple does not approve of, and that would be acceptable, but the rejection we got didn't seem to fit that sort of issue.