Yeah, you’re right. The user just needs to allow apps from unknown sources.

If your employer asks you to disable security settings on your phone to install untrusted software, this raises a lot of alarm bells.

AFAIK I can’t sign the APK to generate trust like I can with MacOS. Although I suppose if I could, then I’d still need to go through verification anyway.

But yes, it’s disingenuous to claim Google is forcing me to do anything. Currently I can distribute software to any Android device with the change of a setting.