This is not news at all. In fact it was sent every single time until something broke in Apple’s validation servers and nobody could launch any app a few years ago. That brought this whole phenomenon to light and Apple changed it to reporting once per week. Edit: Ah I see this is also an old article. That makes sense now.

However they should just send a blacklist to each system obviously. That’s a much more privacy-conscious method. Their stated goal is to be able to block malware, but there can’t be that many.