I think the main difference (and I'm not saying Apple cannot do the same maybe at some point in the future) is between an app is downloading something inside that app and the OS is installing an app. A lot of app are connecting in the background to servers and downloading data without always asking permission. But in general the OS should not install something without asking explicitly.