Microsoft was forced to provide options for multibrowsers and limit it's paint application from competing with photo editing software.
All of your problems are solved with opt-in to secondary app sources. If you want the apple approved walled garden, don't install the alternative and retain all the benefits of percieved security.
What's wrong with letting people install a different app store, and apps? Was firefox worse than internet explorer?