That just means malware sites like download.com will tell users to add the download.com repository.<p>Without curation package managers&#x2F;app stores don&#x27;t offer any additional security, but curation inevitably involves trusting somebody to make those decisions. Do you trust Microsoft to do that for most users?