Surely most people care at least enough about openness to want to be able to install apps on their phone. Your threat model is considering an authorized user in

Surely most people care at least enough about openness to want to be able to install apps on their phone. Your threat model is considering an authorized user installing an app to be a security breach.