I should imagine large kickbacks to apps using Google and Facebook SDKs even if they do not launch stores directly. They don’t need a store if they can get every other store compromised.

I also think shareholders in those companies that lust after data would revolt if they did not try to directly take all app sale profit and install data. I would be shocked if both did not already have apps in development stage.

I think the changes Apple should make is add a little indicator to every app showing the store it was purchased from encircling the icon with the default store color to remind of non-default privacy in that app. Just green badge them all and call it a day to let people know the app will be slower going through app specific memory encryption and API filtering with new anti-piracy frameworks to combat modified or fraudulent purchases.

Perhaps some new app storefront licensing board if the EU is serious about protecting consumers. Their current policy seems half baked along the line of shutting down government is a good thing. Make single click subscription cancellation a requirement for opening a storefront with and require bond to prevent stores from just cutting and running after a few fraudulent sales.

I think it is a shame how much silicon and engineering effort this will burn to maintain device security. It may go as far as apps run through a virtual machine sandbox with limited permissions in the short term. Personally being limited on my device made me sad, but as I lack self control the restrictions helped me focus.