If you can get on other IOS apps and post invoices and qr codes to each other, essentially "zapping" each other then Apple will have to enforce those apps too

They already selectively enforce their rules, that may not work. Why not use a system without gatekeepers? Maybe having to ask permission to use a decentralized permissionless communication system is a bad idea?