PSA: Starting in August this year, for newly published Android apps, Google will require that *they* sign apps, not you. This means that the Android security model is fundamentally broken, because the app is signed by the distributor and not by the developer. (1/3)
Conversation
Replying to
They can already be forced to do this for the initial app install and as part of building Play services and the Play Store into the OS they're granted the ability to install / remove apps in the background and to backup/restore app data. They can transparently replace an app.