| Risk | Mitigation | | :--- | :--- | | | Operate from a favorable jurisdiction (e.g., Poland, Singapore). Focus on open-source and truly abandoned software first. | | Malware injection | 100% manual code review + automated behavioral detection before listing. Bug bounty for modders. | | Mod breaks after app update | Offer "version-lock" guarantee. User stays on frozen version, or we re-mod for 50% fee. |