https://www.brianmadden.com/opinion/How-do-you-block-sideloa...
Basically you create an enterprise profile for your phone and block sideloading of apps as a policy ("Disallow_Install_Unknown_Sources). Same with iOS.