Snappy server source code?

[Max]

Hello,

So, if an independent Distro, wanted to supply their users with their 
own appstore
they could just set up a webserver an fork the Ubuntu-appstore?
Would this even be legal, or could you only put the FreeSoftware Apps in 
your store?

And how would you make sure they are the correct Binaries, build from the
correct source? In LP you can build "reproducable" Snaps, but if you 
would build
an independent appstore, you would have to find all the different 
locations where
the developers put their source and the corresponding .yaml files to be 
sure that
your Snaps correctly and veritably build.

Wouldn't it make sense for snaps under an OS Licenses to be obliged by 
snapcraft
to upload their .yaml files, so someone could verify they pull from the 
right repo, e.g
github? Or maybe upload the whole source code like in Debian, to avoid 
fork-ability issues.

The Snap store is a really great distribution tool for proprietary apps 
ATM , but OS apps have slightly
other requirements, and not being forced to upload your source code, 
could lead potentially
to bad practice or even malware being included in snaps.

Max