I'm sure it's possible on Android to install enterprise management or MAM solution that locks down side-loading, locked behind some custom password (not the regular password that the maid would see)