That physical copy still has to be signed by Microsoft. It’s Sneakernet instead of Internet but everything else stays exactly the same.
Agreed, it's not a perfect system, but it's not exactly the same as the Apple app store - the only way to get software on to iOS for the longest time (recently, side loading has become easier and less gatekept, but still not the same as the desktop experience).