I'm not sure how I feel about this. My gut instinct is that opening these things can lead to a ton of malware and fake app stores, which will lead to a not-insignificant number of people being victimized. I'm also annoyed that the EU produces effectively 0 innovative tech, and subsequently has very suppressed tech salaries, but is so ready to regulate the American companies that make the world go 'round.
It's worth noting that Android already allows such things and there has been no malware apocalypse. In all the years Android existed I've never encountered someone with a malware filled phone. People stick with the default app store and are fine. Agree about the EU though.
The entire history of Android is filled with malware stories. Google has gotten better about moderating their PlayStore, but there have been plenty of flashlight apps or similarly dumb apps that are just rootkits, bitcoin miners, or more malicious forms of malware.