This is supportable by well known technologies. The user could opt-in to various app-signature blacklists and whitelists. App stores and hardware vendors could publish their official app blacklists and whitelists, and even require their use for warranty purposes. On the other hand, the user could also opt-out.