This is because you’re running a version of AOSP that’s been purposefully changed by the carrier to allow them to do that. Stock android does not give your wireless carrier the unfettered ability to remotely install applications on your phone without your permission…