This is because you’re running a version of AOSP that’s been purposefully changed by the carrier to allow them to do that. Stock android does not give your wireless carrier the unfettered ability to remotely install applications on your phone without your permission…
It is possible for the carrier to do it, though. Probably the OEM too, though I’ve been using Pixels for so long I don’t remember seeing it.
This is because you’re running a version of AOSP that’s been purposefully changed by the carrier to allow them to do that. Stock android does not give your wireless carrier the unfettered ability to remotely install applications on your phone without your permission…