On Android 7 and older, this access had to be enabled globally, but the newer versions of Android give users finer, more granular control over which apps can be installed using APK files.

Xiaomi’s method would stop people from extracting the APK file using a regular build of Android. However, if the user was able to get a debug build of Android, they would still be able to take ...