This narrative does not make sense. Any installer has privileges on a system, including verifying hashes or keys so you shouldn't just run an unknown software.

This narrative does not make sense. Any installer has privileges on a system, including verifying hashes or keys so you shouldn't just run an unknown software. Installing apps only from an app store is a walled garden and not having the ability to install apps is not a consumer want. The only people who would advocate this are Google since they gain financially from the model and those who use 'security' to promote walled gardens and moats. Most technical people don't approve of lockdowns and loss of freedom. There is a balance here. If installing apps from the web is a problem then 90 percent of current software is 'insecure'.