> The security model is based on an entitlement system. Which other stores are trustworthy enough to be allowed to issue entitlements?
That's up to the user to decide. It's a lot easier to choose curators from among well-known companies like Apple and Amazon than to choose individual apps that are inherently developed by small shops or individuals.
> If the idea is that users would be able to vet which apps or app stores should get entitlements... well, we've seen how well that works on Android.
Exactly. Some of them do a better job than Google itself. There is probably less malware in F-Droid than on iOS.
And if you like Apple's store then... keep using it. Just because other stores would be available doesn't require you to use them.