Which is why I said sideloading is only a part of the problem, I expilicitly pointed out insufficient Play Store verification and insufficient app sandboxing in my original comment.