I still think the fact that end users know that apps in App Store have been valided by someone creates a kind of secure bubble for the end users. And it works well!