It's a fundamental tradeoff between allowing multiple ways for apps to be installed or forcing everything through a single installation workflow (a la iOS and its App Store).
OP had a good suggestion for a solution, something that allows gating surprise app installs.
Before the iPhone you couldn't even get the "cool" phones in America, Japan had so much better things available and everybody envied what wasn't available here.
The reason we have any control from the carriers was the power Apple had and the stubbornness of Jobs.
A lot of the battles being lost by Apple are being won by groups who will make the ecosystem worse.
That doesn't make it a reasonable device for a sizable segment of the non-tech-savvy population though.
I’ve never understood why people use android, which was built by the largest advertising company in the world. A company with a history of violating privacy, scanning personal data for advertisement purposes. Also, what amazes me, is that many technical, well-informed people continue to use standard android os, knowing full well that they’re giving up major privacy protections and using a much less secure platform than alternatives like iOS. I’m sure there’s good reasons for it that people have and can rationalize.
The main rationalization that I have seen from technical people is that they just hate Apple. They’ll never use Apple, even if they have to give up significant privacy. Other people like the fact they can customize the device (which I like as well), but unfortunately, makes it easier for bad actors to customize your phone in ways you don’t want.
At least this used to be true in the halcyon days when iOS was simple.
