Prevent web Updates in PWA?

Question

I'm currently developing a PWA that will be published in the Microsoft Store. It basically works like an offline app, so all processing is done locally. My question is: Is it possible for a PWA to update exclusively through the Microsoft Store and not from any web URL? My concern is that if someone acquires the domain, they could potentially make a malicious update that users might download. Forcing cache could be managed by the service worker, but pressing Ctrl + F5 would still bypass the service worker and fetch data from the web.