A consequence of unpublishing the app is that the user has to check "allow untrusted sources". That could in turn be practical if your goal is to install spywar

A consequence of unpublishing the app is that the user has to check "allow untrusted sources". That could in turn be practical if your goal is to install spyware (unless byLock itself contains the spyware which might be too obvious).