I didn't catch the angle in one of the parent posts that everything BUT windows store was allowed, but re-reading the chain I can see that now. Yes, blocking sandboxed and vetted apps but allowing anything else is indeed nonsense.

The biggest issue with the Windows Store is the forced installation of several apps that do not belong in an enterprise environment, unnecessarily increasing attack surface.