This is an excellent summary of the news story and potential implications for mobile marketers.
But there is one takeaway I think is probably incorrect:
By enabling direct download, Meta gains a first-party advantage in immediate attribution reporting, and likely — depending on the SDK Meta includes — long-term behavioral data as well.
Why would this be wrong? Yes, much of the discussion around iOS and privacy has focused on the App Tracking Transparency policy, which is enforced via App Store review. But in my view, that's only because the App Store is (currently) the logical chokepoint to use.
When citing the actual definitions of what is/is not allowed, Apple has always meticulously leaned back on the Developer Program License Agreement, which is the set of underlying legal terms that all iOS developers must accept. This matters because even developers who intend to distribute their apps outside of the App Store will still need to follow these terms, which means Apple still controls the ultimate gate.