I don't think it breaks the security model. There could be a strict but fair standard for qualifying as an app store. Then I could choose an app store that imposes an even stricter security/privacy model.