I’m curious to understand how Google defines “malicious apps” that they’re using as the justification for this.

Conceivably, google revoking a certificate will mean an app installed outside of google play, will stop working for users.

How do they feel about celebrite? And the other companies that violate user privacy as their sole reason for existing. Will they still get “permission” for their apps? Seems like a great way to protect users by not issuing one to them…