For the zapstore "as protocol" the selection will happen client-side with people decide for themself what to download, what relays ping and what npub trust.
But for your relay you need to decide a policy and you are responsible of what it store and for the zap.store npub you are responsible for what you sign.