Enabling unknown sources is crucial before downloading and installing any APK. Because you are preventing anybody you don't know from accessing your device in this way. Moreover, nobody can hack or leak your stuff.