To me, this is a lazy solution by Apple. It's easy to keep a whilelist of apps that were manually reviewed (for money!) and just block everything else, leaving

To me, this is a lazy solution by Apple. It's easy to keep a whilelist of apps that were manually reviewed (for money!) and just block everything else, leaving out anyone who's not willing to join the club (or cannot afford it) out in the rain. A more appropriate approach would be to use an actual malware detection system, similar to what AVs to when checking binaries (check fingerprints etc.). AFAIK this is what Windows does, and it's way more inclusive.