Google gives Android users a way to install unverified apps if they worked hard for it(including waiting 24 hours)
(android-developers.googleblog.com)
The biometrics part makes no sense, you can disable biometrics. You mean that you have to do a security confirmation however you've set it up.