There are also mentions of web browser-based installs, but all apps are being notarized and encrypted.

Edit: Upon looking into this further, it appears that only marketplaces can be installed from a web browser. [1]

[1]: https://developer.apple.com/documentation/marketplacekit