> But What If The Host Country [...] Legally Compels the App Store to Ship Malware? > This is an endemic risk to smartphones, but binary transparency makes thi

> But What If The Host Country [...] Legally Compels the App Store to Ship Malware? > This is an endemic risk to smartphones, but binary transparency makes this detectable. > That said, at minimum, the developer should control their own signing keys. So, don’t ship on the Play Store unless you’re grandfathered? > If the developers for an app do not live in a liberal democracy with a robust legal system, they probably cannot tell their government, “No,” if they’re instructed to backdoor the app and cut a release (stealth be damned). Or when the laws of said democracy make it illegal for them to say “no” (see: Australia, possibly the US per Lavabit, realistically every country in Europe if the government is willing to claim a grave enough threat per the German hoster of Jabber.ru attempting a MITM against them).