Only allowing the native 3CX softphone app to be deployed from the Microsoft store adds extra security, and it lets 3CX update it as required without having to tinker with the main Phone System build.