Yes, Metro apps will be sandboxed and downloadable "only" from app store.