12 hours ago, Koz said:

I used to write apps for a living. Trust me - Google does not have a thorough process in vetting code. There are numerous articles and papers on it.

 

https://www.zdnet.com/article/mobile-malware-attacks-are-booming-in-2019-these-are-the-most-common-threats/

 

https://usa.kaspersky.com/resource-center/threats/mobile-malware

 

https://www.sciencedirect.com/science/article/abs/pii/S0167739X18331601

 

 

Yup. Google is horrible. I work with some mobile devs and to get something on the Apple store, you have to keep it patched and up to date and the vetting process usually takes a bit. Google approves theirs within minutes and once added, it won't be removed. I only wonder how many Android apps are sending your passwords to some random server somewhere.

6 hours ago, Boomstick said:

Yup. Google is horrible. I work with some mobile devs and to get something on the Apple store, you have to keep it patched and up to date and the vetting process usually takes a bit. Google approves theirs within minutes and once added, it won't be removed. I only wonder how many Android apps are sending your passwords to some random server somewhere.

I had Apple once ask me to clean up something before they would publish it. And as you stated, they are big on keeping the app components updated whether it's a a newfound javascript exploit or something in a wrapper like phonegap or Cordova.