Something like enabling instant apps and play protect scanning for any apk on the web could mean a nicer and safer experience for users. I think people would still use the app stores for their discovery/convenience but safer web installs could be an option for both users and developers.

This model exists on desktops and laptops, where there is signing or browser scanning, just not on mobile.