if you don't trust the developer, don't buy it just like on web.

the more likely scenario is Paypal, Amazon etc. are going to provide SDKs and developer can use that for checkout instead of going through App Store.