The distribution of IPA files and the use of tools like Cydia Impactor carry significant security risks.
You don't always need a jailbreak to install an IPA. is a desktop tool (also by Saurik) that allows you to "sign" an IPA file using your own Apple ID and install it onto your device. ipa cydia
Cydia relies on root access to the filesystem. In a jailbroken environment, the restrictions on the IPA format are nullified. Unsigned IPAs can be placed directly into the Applications folder, bypassing the need for Apple’s code-signing verification. For years, Cydia was the sole gateway for these applications, creating a thriving economy for tweaks like Winterboard and SBSettings. The distribution of IPA files and the use