The problem is that a web app can never be good enough, because a web app can never be secure. I simply can't trust my private data to a PWA, because the developer can ship me malicious JavaScript at any time. With open source I can compile and audit code myself (or rely on others to do so for me); with an app store I can rely on a vendor to audit code; with a web app I have no assurance.