By choosing not to sideload (where unlocking sideloading is buried so non-technical users don't do it by accident, or even password protected and they can choose to entrust that password to someone else for safe keeping, including the phone manufacturer), or using a reputable alternative repository.

This is not new territory. Nearly all other computers work this way.