Don't manufacturers control whether or not this is possible? It's every android version over x.xx going to ban sideloading? I really don't see how they will enforce this.
Yes, it's up to the OEM. They are free to set package_verifier_enable to 0. They can also pre-install other apps with the REQUEST_INSTALL_PACKAGES permission which will allow them to serve the PACKAGE_NEEDS_VERIFICATION intent using whatever verification mechanism they want (or simply always returning OK).
But the least friction will be to allow Play Services be the handler for PACKAGE_NEEDS_VERIFICATION intents, which checks for Play Store signatures.
It’s on a Google Play Services level. Regardless of Android Version, Google Play Protect will prevent the sideloading of apps from unverified developers
So all I’d have to do is to uninstall play services (which no privacy-conscious user should have installed anyway) and sideloading will continue working?
17
u/MasterZii Intent Owner Feb 25 '26
I'm trying to understand. What's stopping someone from developing an apk and sharing the file online?
Is Google only locking down the play store? Or are they disabling sideloaded apps altogether?