[zepto]

Not only is it possible, it’s trivially easy to sideload apps.

What’s difficult is to distribute commercially, or maliciously without going through Apple.