I think there are a few main contentions: - The requirement, unless I'm mistaken, would tie a real-world identity of the developer to an app, who may wish to k

I think there are a few main contentions: - The requirement, unless I'm mistaken, would tie a real-world identity of the developer to an app, who may wish to keep that separate from a pseudonym they may normally release things with. - Unwillingness to give Google PII or just not tie a particular pseudonymous identity to that PII on Google. - It puts absolute control in Google's hands for whether any app is allowed to run on most devices. There may be concerns about the types of decisions that may arise from this, not merely from recognized malware. Certain governments may ask Google to regulate apps allowed on such devices via this approach. - Once this globally rolls out in 2027 it will mean the audience for apps from devs who don't agree to this will shrink dramatically. Only those presumably with AOSP based custom ROMs will be able to use those apps which may have a knock-on effect for dev motivation.