For now, and only but a tiny fraction of you.

99.99% of users never visit the settings. For those that do, they won't get past scare wall #1 of enabling APKs and scare walls #2, #3, and #4 of downloading, installing, and enabling the app.

Google knows this.

Tyranny of defaults, trained user behaviors, ecosystem, scare tactics, and even SERPs manipulation to make this nigh undiscoverable.

But they weren't content with some number of you slipping through the cracks! They're starting to close the ability to release unsigned and self-signed code. You can only imagine what's after that.