Except on Windows, you can establish that trust level with stores as you go along, instead of having just one store.

For example, I trust Steam, GOG, Epic's store (though I don't use Epic's because I don't want to fragment my library), and a whole assortment of developers specifically.

Also, it's not 2007 anymore, if you trust a developer you can almost always guarantee the app came from the trusted source through code signing. Almost everything is code-signed nowadays. If it isn't, Windows lets you know about it. If it's also not a popular app, the platform actively alerts you about it. VirusTotal and other reputation services also help you make an informed decision on whether an app is trustworthy or not.