For all of those app stores, the current approach prints them money and lets them claim impartiality, while still allowing some control through acceptance rules, ToSes and automated security measures. All those things scale well. Any other approach I can think of ends up having corner cases that involve human support or interfacing with regulatory systems - and these things do not scale well.