I'd say yea, they certainly are dumb! Don't put an admin switch in a consumer app! Sure, they could have put in better checking to make sure it is an appropriate account accessing, but, still, it is better to just leave the code out of the app!
There should be a separate driver app, possibly off the app store. The Enterprise Program is not appropriate, because Uber drivers are not Uber employees, so not technically eligible. But Apple now has a B2B program where this would fit. Even a separate App-Store driver app would be better, because at least it wouldn't (normally) be in the hands of normal users. (I don't know nuthin about Google Play Store. But drivers could just install the driver app from a download on Android, right? Besides, nobody expects security on Android...)
Sure, an app-store driver app would be a target. Which is good. They'd have to be especially careful with that app to make sure that nobody can actually log-in with it without having a driver account. (But, really, best to keep it completely off the public App Store.)
I'm currently working on an app for Karaoke singers to show the Songbook and request to sing. (Works with some popular Karaoke-hosting software.) I'll also have a kiosk version and another version for Karaoke hosts to remote-control the show. Even for this, I know better than to put all this into a single app! Because: Karaoke Murders. Hey, some of these people are serious. Yea, if some singer could take over the show, they would. I mean, they sometimes do this:
I have a workflow for making variant apps. Don't just pour all the code into a single app!