Currently, if the Play Store wants to scan an APK you’re trying to install, a warning will pop up. If users want to bypass this warning they can tap “Install anyway.”
As well as allowing chrome, or any browser or app, permission to install unknown APKs making users input a pin is a good thing. As a lot forget to disallow the permission they granted in the first place via chrome or other apps.
Always toggle off after install 😉