I would prefer that solution.
For the 3rd party templates, there should be more info, where they actually come from. Users should have more control over the template links.
In browsers the browser vendors take care to block links to potentially dangerous sites. That’s not the case for stand alone apps. So we need to take care, that users have control. – Just a thought.