I think you can block sideloadong on android by adding it to an organization. People using them in fleets does not justify users not having it
Discussion
You absolutely can.
https://source.android.com/docs/devices/admin
https://developer.android.com/work/dpc/dedicated-devices/lock-task-mode
This guy is costing his company money by purchasing overpriced products.