It's basically true, though. Google install arbitrary Android apps on nearly any Android phone without user interaction.
Source: If you log in to https://play.google.com from a desktop computer, you can install apps on your phone. You get the permissions dialog on the website (on your desktop computer), not on your phone.