I have more success with pyinstaller than py2exe because it's not targeted at a particular target platform. There is a complication where you need to configure pyinstaller itself for the target platform and then build the app. I scripted this though and now it builds seamlessly every time I need my app (which uses wxpython as well) to support a new platform.
I found this more practical than having different packaging systems for each platform. With those scripts I can now package even for systems I have zero experience with but which python runs on (e.g. AIX, HPUX, QNX).
no, i don't think "any data" could be used for that purpose. they were thinking of scenarios like this: developer writes app that can be extended substantially with scripts. somebody else writes a script that extends that app into a combination phishing scheme and porn viewer.
and no, apple does not review an app's source code, just the finished binary. a little surprising, because it seems like it would be far easier to detect malicious apps by looking at the source. i guess they decided that would be going a little too far.
I found this more practical than having different packaging systems for each platform. With those scripts I can now package even for systems I have zero experience with but which python runs on (e.g. AIX, HPUX, QNX).