You mentioned surveillance -- I presumed you were talking about the ID requirement. This only applies if you're using Google's computers to push out your app.

If you sideload... what "surveillance" are you talking about?

> They've now decided you can't sideload until tomorrow

A single 24 hour waiting period, only the first time. Or just use ADB. The point is to prevent false-urgency scams. Honestly even this seems to me to be pretty weak.

Can you think of a single better option that has any efficacy at all?