Inter-networked connectivity made this style ownership model untenable though since the 90s - the amount of harm an application can do now that it can receive remote instructions and siphon off data has increased.

Hence software publication tied to real-world identity, sandboxing to reduce access to local sensitive data, entitlements to enumerate needs for local capabilities and a review process both to restrict unnecessary entitlements and put additional non-technically-enforceable restrictions on software.

Maybe if GDPR-like regulations were not laxly enforced or non-existent, the platforms would need to do less policing themselves.