Actually this isn't true anymore. I'm not sure about other devices but for my (unrooted stock 2.2) captivate they pushed out a invisible update about 2 weeks ago allowing unknown sources. Just found out a couple of days ago from a captivate forum, been enjoying sideloading apps since.