how can this threat model be worse than PlayStore or AppleStore?
Fran is curating what's in the store, since zapstore is publishing apps for devs, UNTIL the devs publish it themselves.
Public and cryptographically transparent curation
vs
obscure "trust me bro"
What's better?