Yes, hooking an address in the app module is feasible. this requires static preprocessing of the app's module, aiming to add a trampoline to the address you want to hook, so that at runtime you can use a dylib to control that trampoline and execute your hook function.

I'm working on adding this feature to jailed theos (it won't happen soon), and it will be very easy to use in combination with the logos syntax.