Yes, I imagine most companies feel the pain of apps. You can't just write the app, then forget about it. There's various certs and backend services to manage and each time there's a major new release for a new shiny phone model, the app needs updated, causing backwards compatibility issues for existing users with older devices.
I think with something like an alarm panel, it would be easier just implementing a secure webserver and decent API in the Ethernet device. At least that way, as a manufacturer, you have more control over things.