So you download an App from the internet (AppStore) that you’ve never ever used before, with no release history and probably a couple of bad reviews as it turned out to a scam, then you enter your private account info to give this full fill control over approx 1.000.000 $.
Sorry, but that just makes you not the most clever person on this planet.
It is well known that fake apps exist, Apple will never be able to 100% filter out scams. Any expectation that Apple can fully eliminate this risk and let you blindly trust whatever you download from the AppStore is just completely ignorant!