I appreciate the foss alternative, but at the same time it seems downloading binaries manually is also part of the “problem”.

It matters a lot what site binaries are downloaded from, and a lot of average users don’t really understand the difference.

I suppose as long as a human decision is involved there is room for error.

Wonder if this can be solved without going 100% down the app store path.