Debian (by far the largest repo of mainstream Linux) has about 70k packages, and gives approximately $0 payout to package owners. By contrast, Google Play and A

Debian (by far the largest repo of mainstream Linux) has about 70k packages, and gives approximately $0 payout to package owners. By contrast, Google Play and Apple App store have around 2 to 3 million apps each, and aggregated payout of double-digit billion dollars. It should be fairly obvious why they attract so many bad actors. > App stores manage to be simultaneously more restrictive than a repository and less trustworthy than downloading executables through a web browser. Downloading executable through a web browser is something entirely different than Linux repos. Not sure I agree it's less trustworthy than Google Play and especially Apple App store, comparing to Windows download side. If it is, it's mostly down to the the monetary incentives.