To manage app restrictions like preventing uninstalls and setting allow/block lists, the best route is using Android Enterprise in Device Owner mode. It gives you the control needed for enterprise deployments, including keeping critical apps (like A and B) intact.

If you’re building your own EMM just for internal use, you don’t need to go through Google’s EMM review process as long as it’s not being offered publicly.

Alternatives: EMM platforms like Scalefusion, Intune, or MaaS360 already offer these features out of the box, including dependency management, which could save time if you’re looking for a ready solution.