Android will let you install software from a browser. That permission is scoped to the app that downloaded the file, not a master switch that should stay off. Guides that tell you to “disable all security” are treating your phone as disposable. This one does not.
Allow one source, not the whole device
When you open an APK, the system names Chrome, Files, or another installer and asks whether that app may install packages. Say yes only for the action in front of you. Afterwards, open Settings and revoke the permission. Play Protect can stay on the entire time.
What a warning is for
Play Protect is not a dare. If it blocks a sports APK, the useful response is to stop, not to search for a bypass. The longer How to Install page covers parse errors, interrupted downloads, and crash loops without asking you to turn the lights out on the OS.
A better default
Score apps and licensed broadcasters already live in the Play Store. They update in the background and have a company to email when something breaks. Sideload only when you understand why that default is not enough—and accept that you are trading convenience for risk.