I managed to make it work but not sure why. Entitlements wise I use App Sandbox is YES but under Build Settings Enable App Sandbox is Default set to YES for a new project and if I change to No, my app + extension get installed correctly. This setting seems to be not relevant for iOS and only for macOS is it?