Luckily, adding the "web-like" scripting mode will potentially circumvent this.

  “Web like”, where the script is downloaded from the
  net for each execution and run by a single signed
  app that we provide (NetHMD).  Fully specified by
  an app-scheme URI, this allows VR experiences to
  be launched directly from web pages or app-links
  on Facebook, which I think is VERY powerful – read
  about how great something is while browsing on your
  phone, then just click the link and get the “insert
  into HMD” dialog and jump right there.  VR scripts
  can link to other VR scripts without leaving VR. 
  There is no direct monetization here, but IAP
  can eventually be supported.

I think this is a positive outcome of Facebook owning Oculus. If another hardware company owned it, they would potentially be much more myopic about the "Internet"-related possibilities of VR.