you make a fair point, making the distribution easier is a nice feature. I still would have preferred a slightly more open approach however. How about defining an installer protocol? like install://url.to.my.servers/my.app.installer.json.or.whatever.format and then my browser could have the app installer for my OS registered on install:// urls. that way the installer format could be cross platform, and not controlled by any 1 company, but still be an easy point-and-click on a website without the hassle of running other things etc?

Then if you want the trust that the verification of apple gives you, you should make sure you only download software from apple.com, but the whole system is still more open and accessible by being online on websites rather than specific to a piece of software running on OSX.