Doesn't this approach run the risk of blurring the line between voting for an app that you like, and voting for an app that you've actually evaluated technically? If you lose that distinction, then malware apps can get into your public repository merely by upvotes from satisfied users who have voted thumbs up without checking for things like optification or potential security risks.