@Zapstore maybe it is worth tagging apps as "perceived spoofs" so users can be protected by WoT?
I don't know where to draw the line between "remove it and/or ban/block the author" and "let the community protect themselves"
I don't think every Zapstore user will have a WoT they can trust. Many will probably start with none.
