Yeah: and for anyone who doesn't immediately see how this is possible, a curator merely needs to have an allow/deny list of apps--possibly specific reviewed binaries--not actually host them or be the bottleneck for obtaining them: you just want the (hopefully federated) store app(s) to be able to refer to the (hopefully federated) curator(s) to limit the display and prevent installs.