There's nothing particularly difficult about side loading on Google. It's off by default because it's an excellent vector for malicious actors to compromise a user's phone. Users, in the average case, haven't gotten smarter since the days of trojans and malware running rampant under the Windows architecture.