More a problem of those stores still not being properly validated rather a dumping ground for extensions, than anything else.
Yes you can check every single program out there, when digital stores are the only acquisition mechanism.
Or as alternative, signed binaries.
Coupled with liability like anything else in our societies.