Every time I read one of these stories, the first thought I have is: "We should be pushing to have PWA be more robust and be positioned as a first class citizen".
My thinking is that would remove the need for a singular approval process. Liberating all developers to build what they want.
Of course security is always a concern. PWA in sandboxes of some sort sounds like the best path forward.