Neat, but what stops someone from publishing your PWA under their own dev account? Sure you still control the site and data, but they could publish with inappropriate icons, wording, etc. It seems like maybe there is some potential for abuse.
(and ofc, the risk of false negatives is present)