By the way, as far as "grandma won't be sideloading":

https://finance.yahoo.com/news/apple-hits-back-facebook-revo...

Here's an example of Facebook encouraging people to sideload a developer-licensed application with enhanced permissions so they could bypass permissions and leech more data.

So this is not a theoretical problem, this is something that actually happens, and that Apple has had to push back on.