True, this seems like the most balanced solution. Install everything from repos but allow third party repos and stores. That way you are not tied to one gatek

True, this seems like the most balanced solution. Install everything from repos but allow third party repos and stores. That way you are not tied to one gatekeeper but it is in your interest to get your app into at least one good repo that has a reputation to uphold.