1. A method of controlling access to a computing resource by applications executable on a computing device, the method comprising: identifying an application category, wherein the application category is used as a basis for organizing applications available in an application distribution platform; generating a security policy containing one or more rules that specify whether one or more applications, that have been categorized in the application distribution platform as belonging to the application category, are permitted to access the computing resource on the computing device; transmitting the security policy to the computing device; wherein when an application of the one or more applications is added to the computing device, the added application is automatically assigned to the application category as categorized in the application distribution platform; and wherein when the security policy is enforced at the computing device, access to the computing resource by the added application is controlled by the one or more rules, receiving, from each of a plurality of computing devices, data indicating that an identified application of the one or more applications has been associated with a user-assigned application category on the computing device; and changing an assignment of the identified application to the user-assigned application category, if data indicating that the identified application of the one or more applications has been associated with the user-assigned application category is received from at least a threshold plurality of computing devices.