In fairness, that's not true. I've downloaded apk's and installed. Yes, there is a setting to allow it in the first place, and a few warnings to dismiss, but it's no major headache. I've downloaded a couple and done it easily enough.
But it is difficult and/or annoying enough that many on Android won’t.
It could be simplified by a good bit depending on what OEM.