Yes you can check every single program out there, when digital stores are the only acquisition mechanism.

Or as alternative, signed binaries.

Coupled with liability like anything else in our societies.