> My understanding is that Google really wants to manage your keys so that you can't really mess up. Instead, Google can really mess up. Which they will do som

> My understanding is that Google really wants to manage your keys so that you can't really mess up. Instead, Google can really mess up. Which they will do somewhat less often than your average app developer, but when they do do it, it will break everything. > I'd love to be corrected, as there might be some key rotation procedure in place that I'm unaware of. In any case, even if you owned the signing key, no one could theoretically stop Google from providing an APK signed with another key to the PlayStore users, [...] Only on new installs, which is a much smaller window than being able to change the app on every update. "Google" in the large, of course, also has a lot of paths to modify the OS and everything that's validating the signatures... but that's a different part of Google, and that risk does not justify this one.