Which, unfortunately, is a rather risky situation considering for instance all the rogue ChatGPT-branded extensions and apps people downloaded without a second thought to their legitimacy.

We have been conditioned to view branding as the certificate of legitimacy, and that simply is not true for the Internet where branding can be copied and pasted in seconds.

Or get signed and trusted apps from a community run alternative "app store" like F-Droid, Arch, or Debian.

Can't do that on iOS.