Enterprise config for iOS should have the option of disabling this on the device. Doesn't mean ordinary end users shouldn't have the choice if they want it.
I think maybe we're not on the same wavelength here: we were provisioning to end user devices, through this. Doctors had iPhones? Here you go, just click this link and now we can install anything we want. Nobody asked if it was legit, they just clicked.
Making this worse would be an Android-level disaster for end user safety.
Making this worse would be an Android-level disaster for end user safety.