Google's plan to restrict sideloading on Android has a potential escape hatch for users
(www.androidauthority.com)
They couldn't. Domains and SSL certificates can be obtained very easily anonymously and thus wouldn't let Google identify the developers of malicious apps, which is the goal of this