That's actually quite clever in a devious way: by giving app developers the control over blocking sideloading, Google essentially sidesteps the requirement to be fully open.

They can now just point to the developers: it's them, not us!