Is it possible to allow sideloading and keep users safe?

It's a false dichotomy; according to information Google has provided, most Android malware is downloaded from Google's own Play Store, so preventing sideloading won't have a significant effect on malware installations.