App stores are a free market. If users don't want to risk their security, they can simply not download the app. On average, the invisible hand of the market and the wisdom of the crowds will choose the best option. If we can't trust markets to work these things out, what can we trust them with?