1Your Apple ID signs the app
iOS only opens an app that carries a signature. The desktop tool signs each IPA with your own Apple ID, so the iPhone accepts it and nothing in the system gets jailbroken. Updates from Apple keep coming as usual.
An IPA with no signature
iOS refuses to open it.