The impact is a direct threat to independent AOSP distributions like Murena's e/OS/ (which I'm personally using).
I don't think this is true, right? An AOSP build can just decide to still allow installing arbitrary APKs. Also see this post from the GrapheneOS team:
https://mastodon.social/@GrapheneOS@grapheneos.social/116103...