Zapstore is cool but is your npub still tied to your app list and known to Zapstore and the public? I like Zapstore but that may be a concern for some threat models to have installed apps known.

Also, I've been watching for more apps on Zapstore to be signed by devs themselves rather than Zapstore. Some are, most aren't. Should improve.