Looking at this old bug https://bugzilla.mozilla.org/show_bug.cgi?id=1309288 and the patch someone once wrote: https://hg.mozilla.org/mozreview/gecko/rev/520bf9586b1ea7bb2eea3430611aef15b201ef15#index_header
it seems like AddonManager already exposes a installAddonFromSources. So shouldn't we just be able to call AddonManager.installAddonFromSource once and be done with it?