I'm not sure I agree or understand where you're coming from. Side-loaded Android apps are still bound by all the same permission restrictions as any app installed by the Play Store. The only difference is Google didn't review it (for what little good that does) and that I didn't get the app from Google.

If I side-load a camera app, it still has to ask for camera privileges the same way any Play store app does.

Is there something in your message I missed about how it relates to this article or is this just being uninformed about side-loading?

Sideloading bypasses nothing at all except Google's thumbs-up, Android's permission system doesn't work that way.