Review source permission after a COME APK installation
After installing from a source you chose to trust, review whether that source still needs permission to install unknown apps.
Find the same source
Use Android's settings for the browser or file manager that opened the APK. The exact menu varies by device. Review the application named in the original prompt rather than changing unrelated sources.
Understand the scope
Turning off future installation permission for that source is different from uninstalling COME or revoking the installed app's runtime permissions. Read the confirmation so that you change only the intended setting.
Keep future decisions deliberate
A later update may require another conscious source decision. Check the then-current file and origin rather than leaving permission broadly enabled for convenience. Play Protect should stay on whether the source setting is enabled or disabled.
A useful next step
Finish by checking the installed app through the normal launcher and keeping account recovery access available.
Related: When Android asks for permission during a COME download