@jendrik Don't get me wrong, I don't like the "intermediate" option of registering with Google for a signing cert using gov IDs either. In fact, I would not be surprised if they only offer the unrestricted third option due to regulations. However, side-loading is only relevant to a fraction of users and offers no safety rails whatsoever - stores typically warn you when something you installed is vulnerable. It does make sense to make it more obscure to enable, in my opinion.