>>106490613
That's how play protect works currently:
>You try to install an app from outside of play store -> it'll get scanned
>If it's known malware (or in this case, if it's not signed by a registered dev) the install is blocked
Cool, but you can still disable Play Protect or even outright uninstall it using adb. Now:
>You try to install an app from outside of play store -> it won't get scanned, since nothing is set up to do so
>Your app is installed
Now, if you enable Play Protect again it will not auto-remove the app. It will still scan it and warn you it's dangerous.
They pretty much confirmed that this whole "anti-sideloading" measures are going to use Play Protect and GMS. Both of these can be disabled/uninstalled. Worst case scenario is you're losing these permanently in favor of unverified software.
It's literally the same shit Windows had since Vista. Windows executables that are not signed with trusted certificates (which have to be registered by developers/publishers) raise a UAC warning or are outright deleted by Defender.