They aren't entirely wrong here. Bad actors could very well create "app stores" that play is forced to host, giving them an air of legitimacy, and then pull their marks out of the monitored ecosystem for attack. I think users should be allowed to seek out and download whatever they want on their device, but utilizing another company the consumer trusts (rightfully or wrongly) to do so by force and without oversight is not the way to go.