You could make exactly the same argument for installing software onto your computer, it is an attack vector and going through microsoft’s store or your distro’s repos gives a level of curation. So should desktop users be prevented/scared off from installing what software they want because it’s a security issue?