Once to get to app store
Once to click install
A double tap to verify after face/touch/passcode on ios
(I use iOS.)
I'd hope PWAs on Android take at least two actions to install (though perhaps not three). One-tap is how you end up with every user having tons of apps installed they never intended to.