Comparing the App Store with 20 years old methods is a fallacy. To be realistic you should compare using the Android/Mozilla/Windows/Web distribution methods.
Only it has the ability to sideload applications which let's be honest as primarily been used for installing pirated applications.
[1] Ironically, I think the pervasive sideloading third-party app stores on Android require is a bug, not a feature. I'd much rather see an official way to add "known sources" so that, after the initial install, you didn't need to leave sideloading enabled in order to use them.
[0]: https://gitlab.com/fdroid/fdroiddata/blob/master/stats/total...
ha. that's a good one. I've had apps on both iOS and Android with < 10% of the installs being legit.
The signature check makes sure 'the developer has paid Apple', and not 'the user has paid for this app'.
Sideloading of apps allows for apps that Google may not care for, and that Apple actively prohibits (eg bitcoin), the difference being that you can still run them on Android if you really want to.
(1) installing the resulting unsigned app on a jailbroken phone, or
(2) re-signing it with a developer or enterprise distribution key, which Apple can revoke.
Both of these are done regularly, but it's not like Apple hasn't tried to stop it.
By the way, Apple no longer forbids Bitcoin apps, although this doesn't defeat the general point about forbidden categories.