If the app was on the device from the web or from a store it could remove their capability, but if the app is not yet on the device palm can easily upload a lis

If the app was on the device from the web or from a store it could remove their capability, but if the app is not yet on the device palm can easily upload a list of bad apps to not allow to run. Presumably this is what they would have to do with an existing app store app that went bad as a way to kill the one that have already been installed.