> Apple is well on its way to ensure you can only run things they allow via app store,

What are you talking about? I don’t run a single app from the app store and have never felt a need to.