You can't seriously actually trust that turning it off in the Google owned app they control or update will be meaningful. I'm really sick of people claiming it is, and I hope this will get them to realize that.
If you want to crush it fully, disable google play store as a whole, and make sure to tell your friends too because if that solution doesn't get more popular there might not be third party apps to install since the devs will just quit.
Probably not, but I imagine that disabling or uninstalling the play store will bypass it since it'll likely use the Play Protect Dialogue injection in Package Installer to bounce inauthentic installations.