On the Google Play Store, they have app IDs com.driver.coop and com.rider.coop. I figure these should be coop.drivers.driver and coop.drivers.rider. This sugges

On the Google Play Store, they have app IDs com.driver.coop and com.rider.coop. I figure these should be coop.drivers.driver and coop.drivers.rider. This suggests to me that Google aren’t verifying domain ownership in app IDs, which I find a tad surprising. I had just assumed they would, and thus that you could trust that apps on the Google Play Store with IDs like com.example.foo or io.github.example.foo were actually from whoever ran example.com and example.github.io. That sounds like a mild phishing opportunity (only mild because I doubt most ever notice app IDs).