I doubt Google actually reviews each app submitted line by line of code.
So a malicious developer can theoretically sneak it in one popular app via play store updates.
Good thing the point of 2FA is the 2 factor part so this only compromises one of the two, without some very coordinated attack it’s still quite hard to gain access to your accounts.
I doubt Google actually reviews each app submitted line by line of code. So a malicious developer can theoretically sneak it in one popular app via play store updates.
Good thing the point of 2FA is the 2 factor part so this only compromises one of the two, without some very coordinated attack it’s still quite hard to gain access to your accounts.