If anything, it's the playstore which is a side channel and the website of the software producer the main one.

That's a good point.