This is why I also mentioned "a source we chose". On GNU/Linux package managers and F-Droid I can add additional package sources which can be managed by the developer.
Point is, it shouldn't be a thing that Apple or Google or anyone has this kind of power.