After today's drama there's a clear takeaway:
Apps are not shitposts, even if both are carried over the same protocol.
Catalogs are responsible for the apps they publish, and the well-functioning we...
Regarding people not paying attention - maybe it would be useful to display a warning if an app is not signed by a pubkey from your web of trust? Might be annoying for some, but would decrease the probability of a slip.
2🤔1
