How do you even stop distribution of malware though? For a second or two I thought this would be a really cool idea to start working on; but assuming everyone can spin up their own instance there’s nothing that would stop someone with evil intentions to create a fake store that federates with all good storefronts.