> its Google's responsibility to make sure those apps never make it into the app store Good, we agree, they should take this action which helps them keep fraud

> its Google's responsibility to make sure those apps never make it into the app store Good, we agree, they should take this action which helps them keep fraudulent apps out of their App Store. > Chase also could require an authentication code Chase does require that. It doesn’t help here, because you can obviously phish codes just as easily as passwords. The solution here is attestation, anything else is a hack that makes bad behavior much too easy.