Why is it that software repositories work so much better than these app stores? Every app store on every platform is a wasteland of adware and malware, but I have never found such a program in, say, the Debian repos.
App stores manage to be simultaneously more restrictive than a repository and less trustworthy than downloading executables through a web browser.
There's an element of curation - any rando can't just upload something to Debian, there's a web of trust.
But mainly I think it's that repositories are invariably built from source. Everything in a distro repository is open source software, guranteed to have been built from source from scratch. F-Droid does this, and its repositories are as clean as any Linux distro's as far as I can tell.
(This is why Moxie's claim that F-Droid is somehow less secure than Google Play because it signs its own .apks is weapons-grade baloneyum. On Google Play, that .apk could have anything in it. On F-Droid, that signature is a guarantee that that app has been downloaded and built from public sources, just like any Linux distribution. If F-Droid allowed developers to sign their own apps, then F-Droid couldn't build the apps, unless every app supported reproducible builds.)
In addition to what other had said, I think that, since there aren't any money to be made of debian repos, unlike the app store, shady actors won't be likely to bother.
Debian (by far the largest repo of mainstream Linux) has about 70k packages, and gives approximately $0 payout to package owners. By contrast, Google Play and Apple App store have around 2 to 3 million apps each, and aggregated payout of double-digit billion dollars. It should be fairly obvious why they attract so many bad actors.
> App stores manage to be simultaneously more restrictive than a repository and less trustworthy than downloading executables through a web browser.
Downloading executable through a web browser is something entirely different than Linux repos. Not sure I agree it's less trustworthy than Google Play and especially Apple App store, comparing to Windows download side. If it is, it's mostly down to the the monetary incentives.
App stores manage to be simultaneously more restrictive than a repository and less trustworthy than downloading executables through a web browser.