There is no reason for "root access". An API call to install a packaged app in a sandbox, and update apps that are installed is all that you would require.
Apps would be consistently installed to a sandbox identified by their bundle identifier (which is typically domain-based).
This is effectively what already happens on iOS.
App certification/verification would be done using exactly the same certs we use for domains (possibly co-signed by the store as part of their curation/verification/drm process) to ensure the store can only install what the developer provides, and what the store curators permit to be distributed through their store.
I don't think changing 30% to some other arbitrary figure solves anything. For me the biggest problem is Apple deciding what/whose apps ios (and macos, given the recent code signing requirements coming with mac silicon...) users are permitted to use.
Apps would be consistently installed to a sandbox identified by their bundle identifier (which is typically domain-based).
This is effectively what already happens on iOS.
App certification/verification would be done using exactly the same certs we use for domains (possibly co-signed by the store as part of their curation/verification/drm process) to ensure the store can only install what the developer provides, and what the store curators permit to be distributed through their store.
I don't think changing 30% to some other arbitrary figure solves anything. For me the biggest problem is Apple deciding what/whose apps ios (and macos, given the recent code signing requirements coming with mac silicon...) users are permitted to use.