That was probably on purpose: the scrutiny for a Facebook enterprise account with maybe dozens of internal apps will be much lower than for a weird account which has only one or two apps but a lot of installs.

Easier to hide the rule-breaking app in a swarm of legitimate ones.