Apple's "manual review" process stopped meaning anything to me when they verified a trojan horse version of LastPass: https://blog.lastpass.com/posts/warning-fraudulent-app-imper...

I don't even know how this is possible. FOSS repos have more security than that...