Yes you can, and so can the unwashed masses that have 10 toolbars in IE, ransomware, viruses, etc.

And it’s not just dumb people downloading from shady sources. Look for a printer driver online and you’re just as likely to find a fake malware site as the real site.

The need for trusted sources for downloading apps with limited permissions can easily be seen if you look at some people’s PCs - or Android devices.