And it's a pretty good defense. Say those dark patterns are removed - and loading a .apk from the web on a completely new pixel 3 shows the "do you want to install this app?" dialog. What's stopping any of those apps from masquerading as official Google/banking apps and stealing user credentials? Or what if the app is named "get any app free app store" and, along with providing cracked apps from Google Play, it enrolled your android in a botnet?