I 100% agree when it comes to security issues. They would have to host it themselves on their intranet through AppleConnect.

I'm a bit removed from what software Apple uses nowadays. Back when I worked there ~2021 it was still a mix of native apps (Radar, Phantom) and self-hosted enterprise versions of popular development tools. (eg. GitHub)