Read the browser's COME file-save confirmation
A browser may ask whether to save a file before transferring it. Read the name, destination and warning before making that decision.
Distinguish saving from installing
A save confirmation concerns storing a file. It does not give Android permission to install it. Conversely, cancelling a save prompt does not uninstall an existing app. Keep these two decisions separate when explaining what happened.
Inspect the offered item
Check the current source address and displayed file details. A filename alone cannot prove who created the APK. If the prompt shows an unexpected file type or suspicious destination, cancel rather than altering the name or extension.
Use the download status
After a deliberate save choice, let the browser show whether the transfer completes. A pending or interrupted entry is not ready to open. If browser security flags the file, read the warning and retain protection instead of searching for a bypass.
A useful next step
Once the file has completed without an unresolved warning, review Android's separate installation prompt.
Related: Avoid duplicate COME APK downloads after repeated clicks