The problem is that Win32 apps are inherently unsafe. If you want a safe source for installing software, you need a sandboxed app model, which on Windows means

The problem is that Win32 apps are inherently unsafe. If you want a safe source for installing software, you need a sandboxed app model, which on Windows means UWP or web apps. Unfortunately the Windows store eventually decided to compromise safety in the hopes of attracting more apps (the container format that Win32 apps in the store use isn't a real security sandbox).