app devs have opinions, as do architects and project managers and whoever assigns the task (CEO/CTO)
definitely there can be trust ratings on apps... if more apps tag their events with the app identifier we will start to see which apps are more trusted
nostr:npub1jlrs53pkdfjnts29kveljul2sm0actt6n8dxrrzqcersttvcuv3qdjynqn has been a pioneer with this, IMO it should be standard (remember "sent from twitter mobile" and "sent from twitter ios" and such things?)