If they’re root, they already can. Like Google Play and other root/system apps that can install apps without the pop-up.

It is an obvious double measure but it’s been around for a long time, and it’s not too insecure or annoying unless manufacturers install malware as system apps and/or disallow locking the boatloader (they do, sadly).