> I would think making sure outside payment links aren’t scams will be more expensive than that because checking that once isn’t sufficient.

According to the ruling on page 42, "(c) Apple should receive no commission for the security and privacy features it offers to external links, and its calculation of its necessary costs for external links should not include the cost associated with the security and privacy features it offers with its IAP"