> I really can’t think of any other software distribution channels for general purpose computing devices (including the open web) that have had a better security track record than the App Store

GNU/Linux packaging systems? F-Droid?