@aks @thomholwerda If the premise is switching to getting apps directly from their publishers rather than a trusted distro, then sadly operating a permissions system is needed.
Arguably this is evidence that the premise is bad, and actually distros were a good idea.