This is exactly what's wrong with Apple's app store exclusivity. It's also what's wrong with mandatory notarization where regulations forbid that, and Google's plan to require developer verification.
Websites don’t need an App Store.
Discoverability of PWAs is quite bad. I'd love them to become more popular, but attempted solutions range from "user manually needs to hit the install button in a menu" to banners capable of saying "install freewhatsappupdate.xyz for exclusive whatsapp deals"/"click install to verify you're human".
Microsoft actually tried to bring more attention to web apps by adding them to their app store, but nobody uses the MS app store.