> the store itself allowed you to inspect the source that went into building the plugin

Or at least build it from the source code, like F-Droid.