What difference does it make if the user has a pump action or a semiautomatic should s/he choose to shoot him/herself in the foot?

You either stick to the repository of known good apps your you run the risk. Having a button is no more dangerous. It's not like it has "brick" in the menu you just tap while half asleep.

One needs to read up on it, enable it, push it, then browse to a package and agree.

Nothing saves you from that. If anything, having to jump through hoops is more of a warning than pasting unknown strings in the terminal.

If you paste stuff in terminal and you have no clue about what they do then no safeguard will help you. And depriving others of a feature is not the answer.

What next? iApproved iContent only?