Let’s talk about the last time you installed an app that wasn’t in the app store.
Maybe you never have. Most people haven’t. But the ability to do it — to load software onto a device you paid for, from a source you chose — that is the entire difference between owning a thing and renting it.
On September 30th, Google flips a switch. Starting in Brazil, Indonesia, Singapore and Thailand, every app that lands on a certified Android device has to come from a developer whose identity Google has verified. Legal name. Address. Email. Phone number. A government ID if you’re a person. A D-U-N-S number if you’re a company.
They frame it as an ID check at the airport. Google actually says that — “like an ID check at the airport, which confirms a traveler’s identity but is separate from the security screening of their bags.” Confirm who the developer is, not what’s in the app.
Here’s what that analogy hides. At the airport, the person checking your ID is the government, and the reason it happens is that boarding a plane lets you cross a border into places the state is answerable for. An ID check earns its keep because someone has to be accountable for you being there.
Now apply the same logic to your phone. Google is the airport. You’re the passenger trying to put code on hardware you own. And the gatekeeper deciding whether a developer is a real, verified human — that’s Google too.
This is the part people are missing.
It is not about malware. Google’s own analysis found sideloaded apps carry fifty times more malware than the Play Store. That’s the cover story, and it’s a good one. But the verification doesn’t check the app. It checks the identity of the person who wrote it. A malicious developer who verifies is every bit as dangerous as one who doesn’t. What verification actually removes is not the threat. It’s the anonymity.
And anonymity is not a bug in sideloading. It’s the whole point. The value of installing outside the store is that you don’t need anyone’s permission. The hobbyist, the student, the tinkerer, the person who wants to run software Google hasn’t approved from a developer Google hasn’t blessed — that freedom is what the open side of Android actually is.
Now that freedom survives only as a favor. Google will let you install from an unverified developer, if you complete “a one-time setup” and acknowledge the risks. A special advanced flow. A permission slip you fill out to do the thing you could already do.
And notice the fine print. There’s a free “limited distribution” account for students and hobbyists — no fee, no government ID. But it caps you at twenty devices. Twenty. You can reach your friends, your family, your little corner of the world. You cannot reach anyone else until you hand Google your real name.
That is a leash with a number on it, and the number is twenty.
In 2027 it goes global. Every certified Android device on Earth, every app, every sideloaded package — verified by Google, or it doesn’t install.
Nobody voted for this. And that’s the quiet thing. Identity verification has quietly become the toll you pay to touch your own machine — the same way proving your age became the price of opening an app, and proving you’re human became the price of loading a website.
The airport ID check worked because the state was answerable to you. The gatekeeper here is a company whose incentive is not your sovereignty. It’s your dependence.
So the principle you hold onto is this: the right to run what you choose on hardware you own, from someone the platform has not confiscated. You don’t get freedom because the machine approves your paperwork. You get freedom because it’s your device.
The next fight is not over apps. It’s over who gets to say you’re real enough to run your own life. That’s the one to watch.