Proper solution is to direct the user of unknown protocol scheme to the vetted app store or a catalog.

But wait, Windows does that since Vista, except like everything it's faulty.