I'm under the impression that Google can remote kill any .apk that's been installed, not just those that came from the market. Is that inaccurate? I suppose even if they can't do it directly, they could force push an app that would remove a non-market app similar to how they pushed a cleaner for the market malware.

P.S. - Please let me turn off web market/off device installs. Thanks.