[ryao]

Definitely. Blackhats are much better at overseeing application distribution than the OS vendor. :P

In all seriousness, you already have to trust the OS vendor not to be trying to do bad things. Having them oversee software distribution at least does not increase the number of organizations you need to trust. If you have someone else do it, you will be opening the door to black hats that will be clamoring to take that role. Not relying on the OS vendor to do that is how we have scams where the victims installed the malware that harmed them. :/

[abridges6523]

Have you used an AppStore? They’re both full of scammy apps

[salawat]

Trust is a Social/People problem that most techies are uniquely unequipped to scalably solve.