That makes sense. I'll also grant that one of the most effective security measure is to deny by default and only allow stuff explicitly (with a single, controlled app store in this case). Personally I think the reasons for those security measure are not worth the freedom limitations and I guess that's why I've never been a fan of the apple ecosystem.