I don't even mean the isolation.
I mean the /app store/-ish part of this.
being phished into installing a malicious app?
being typosquatted into installing a malicious app instead of a good one?
an app being maliciously updated?
a vulnerable app not being updated?
a lack of community review?