There is a switch in google account security on the web to turn this off, I did so a long time ago and thankfully, it stayed off on the phone. I think this new settings is just bringing it to the phone UI.

But at this point best thing to do is block all google play updates before they roll out the complete block for external app installation to more countries.