I understand limiting application source to the official one by default. Heck, even on Linux systems the default is always to have just the official repositories enabled, with the exception of Flatpak which is quite sandboxed. And who else Apple would trust to bare the default source than Apple themselfs?
But user must be able to choose otherwise if wants, period.