I mean… This is kind of why I never let people use my phone.

I have installations from various sources enabled… Like my browser, because I know what I’m doing. But I wouldn’t trust anyone as the process is currently effortless…

If someone is trying to install spyware on you (like a partner or parent.) this might offer some notification and prevention.

I don’t really see the big deal. You do it once, enable it forever, and wipe up those tears.

I think a better way would just to have maybe like a biometric/pin confirmation upon installation. Simple. Clean.