You’re precisely right, and of course there’s no possible way on Earth that we could create a safe way to allow users to install apps outside of the blessed path. No matter how many steps people have to go through, even if they have to pass a special exam to prove their competence, even if they have to sign something that says they could lose their life savings and submit it to a court to document this fact. There’s just not a single possible way to protect people to an adequate degree.

That the gatekeeper and government benefit from this arrangement is just a happy accident.