Because users, largely, are stupid.

Security usually comes at the price of inconvenience.

You’re not forced to use the app store by any means and if you find it difficult not to, then you’re probably the type of user they want to protect.