These days? Sadly, yes. With good reason, I cannot by default trust any software from the web.

Depending on how exactly this is done, it might yet be safe: we can have multiple roots of trust, multi multiple app stores, etc.

I'm nostalgic for the bygone days when I didn't feel even slightly concerned about spyware because no bank cards were stored on my device and tech companies didn't phone home so routinely that the EU nations unified their existing legislation into GDPR in a vain attempt to try to get them to stop.

But I don't see those days returning short of a Butlerian Jihad against anything post-2002.