How to avoid silent app installations
The only way to be sure is using an firewall or manually read every permission for every app installed on your phone and use an permission revoker app both requires root.

You will search for any app that have the permission "download files without notification" and either revoke that permission (it might cause some bugs) or either just block them out of the internet using an firewall like AFWall+