I have blocked app store. But I can still download any apps from the internet. I'm attaching a screenshot.
Go to Preferences -> "Privacy & Security". Even if I select "Allow application from" -> "App store". I can still install apps from know developers by clicking "Open Anyway".
Can you block opening file types and block .dmg files or somehow disallow any kind of app installations from outside?