Simply allowing sideloading is the best solution because it disrupts users the least while maximizing their freedom. Web apps are not the answer because they will never cut it for every use case (even if that use case is just the installation of a non-Apple browser engine).