I suspect the larger issue is that providing too much detail essentially trains malware authors to route around the company's defenses. Perhaps so, but it seem

I suspect the larger issue is that providing too much detail essentially trains malware authors to route around the company's defenses. Perhaps so, but it seems not unreasonable to have SOME ability to work with the creator of an app that's been on the store for years with a substantial number of ongoing users and (speculating) a non troublesome patten of installs and purchases. Nobody believes that Google is technically out financially unable to do this, which leaves the other option - at a corporate level not giving a shit enough to even bother trying. Google will often do the right thing whether by plan or by happenstance, but it pays to be aware that when it does the wrong thing there is no recourse and will be no correction.