Earlier quoted context omitted.
Different threat model. You're thinking of big tech companies like Meta, who are big enough to warrant regulatory attention. I'm thinking of fly-by-night shady app developers that make flashlight/weather/"security"/IoT/game apps, that fly under the radar because they're too small.
Not really the kind of apps people would sideload?
We shall see — that may simply be a security mindset paranoia on my part.