Users typically need to enable "Install from Unknown Sources" and disable Google Play Protect, which immediately flags these apps as harmful.