On the (In)Security of LLM App Stores