A gentle reminder that “sideloading” is optional and probably won’t be easy to activate, so your mom is safe.

Scammers could already find a way in by using certificates or something like that.

I don’t know anyone with an Android that uses a third-party app store. This will be the same for iOS. This is a niche feature, but something that makes sense. No major OS should be “store-locked”.