is there a way to disable app installations until you provide a certain PIN? I have the following scenario in mind:
I'm a heavy Google Photos and Google Drive user, but only from my Windows computer as cloud-backups.
When I loose my smartphone and they "somehow" got access to it (even though I'm using fingerprint - but you never know. I would not bet against it that there is ANY way to break into the phone) -> Even though they I'm not yet using Google Drive or Photo Android apps, people could easily install them on the phone and as my Google account is known to the phone, they could do whatever they want with the data.
Is there ANY way to protect against it? Can you trust Android lockscreen if you use fingerprint sensor or is there mostly a way around it?
I know I can detach devices from my granted account-access for services like Google, Dropbox, Facebook from the Web-Frontend - but what if I don't have any internet connection - or if I am away from home and I use 2-step auth using my phone? Then I can't simply login from any other computer then the one at home to revoke Account-Authentication for the mentioned apps.
After thinking about my question again and reading your answers - I come to the conclusion, I didnt think the question to an end. Indeed, the core of the question is not really about preventing anyone from installing any app, because as Mike Ounsworth pointed out -> If they gain access, they can somehow do it for sure.
So I guess I should rephrase the question to: How to best protect against anyone from stealing my identity if they gain physical access to my device by stealing it or finding my lost device.
Is the Android safe, i.e. can I trust it so that it keeps anyone out even if they have all their tools on Windows, which are available on the darknet or anywhere else.