I hope they are also hyper sandboxed.
There is no reason to believe side loaded apps won’t get the same treatment, and every reason to believe Apple has been doubling down on securing and tightening up the current sandbox implementation.
Throw side-loaded Apps into a separate virtual machine with a different iOS, etc. No access to anything other than itself.