That's kinda the point that having a single controlling entity makes the ecosystem vulnerable to this kind of pressure.
I wish it weren’t so.
Have you thought about what that would mean in practice? Given that the APK could be hosted on multiple (TLS-enabled) foreign sites, a government would need a team of people to be constantly monitoring the web for sites containing the APK, who would then send orders to domestic ISPs demanding that they prevent their customers from accessing those foreign sites.
I believe it is also possible to share apps via Bluetooth.
You mean like the MAFIAA[0] has been doing for decades?
https://www.mobiles24.co/downloads/s/96965-m1769-speak_softl...