Since Windows 8.1 a couple years back, you can sign into a Microsoft account in the Store on top of an Active Domain account without confusing/combining them. Since Windows 8.1 you can even sign into a Microsoft account on an individual app basis, signing in for specific app purchases only. Since early Windows 10 that individual app basis has been expanded so that most free apps don't require a Microsoft account to sign in at all, if you so desire.
Furthermore, the Windows Store for Business uses Active Domain accounts entirely and allows you to connect Windows Store licenses to corporate licensing policies, if you want to control corporate application requisitions centrally but still give users some individual control in Store installed apps. (Not to mention carrying private internal apps for an enterprise.) WSB has been around in various capacities since Windows 8.1 as well, but also fully came into its own very early in Windows 10.
As for application vetting and "apps people need", that's entirely a subjective judgment, but there is an application vetting process in place which is more than you can say about the traditional google for an MSI/EXE and hope its correct install process.
Furthermore, the Windows Store for Business uses Active Domain accounts entirely and allows you to connect Windows Store licenses to corporate licensing policies, if you want to control corporate application requisitions centrally but still give users some individual control in Store installed apps. (Not to mention carrying private internal apps for an enterprise.) WSB has been around in various capacities since Windows 8.1 as well, but also fully came into its own very early in Windows 10.
As for application vetting and "apps people need", that's entirely a subjective judgment, but there is an application vetting process in place which is more than you can say about the traditional google for an MSI/EXE and hope its correct install process.