It's a shame EV certs are so hard to get. APK signatures use certificates and we could use the already existing CA infrastructure to make app stores unnecessary but stuff didn't work out that way.