Recent GitHub PoCs use AccessibilityNodeInfo to read the UI hierarchy and specifically target the “Install anyway” button for unknown sources , even when GPP tries to force a “Block” button.