How does the Zapstore protect me as of now? Anyone can publish an app, even Zapstore published many GH APKs themselves instead of the original creators. Zapstore just shift trust one step, isn't it(?) - unless the npub is followed by myself and optionally/ideally this is follow done face to face I don't know if can it be trusted. Also the WoT reputation, is better than nothing, yet can't ultimately save the day. Or I am missing something. This could just happen here as well just it's not yet worth of targeting I think.