Link. To avoid PUPs restrict installs to App Store. (Which, yes, needs to improve a lot.)