1. AV program catches the attempt, prevents the installation.
2. Much simpler from Apple's perspective: prevent installation from outside the App Store.