why not cut to the chase and simply remove user access to devices? preventing non playstore installs and restricting adb are addressing symptoms, user behaviour, not actual security issues.

RIP android.