I think this strategy makes sense, if you do an overall push to have all software sources verified. Knowing users, a simple warning that an app is unverified rarely affects their behaviour. You need to hide the app, to encourage app developers to get verified for it to work. Users ideally should be able to trust by default, because we can’t trust them to know any better.