you said this:
They need to maintain compatibility with play services to access apps on play store.
but that does not explain why don't they already block installing 3rd party apps. they don't need to allows this to oeep access to the play store.