F-Droid Criticizes Google's Android Developer Verification System
Open-source app repository F-Droid has criticized Google's Android Developer Verification (ADV) mechanism, labeling it a "virus masquerading as a seemingly harmless process."
The open-source application repository F-Droid has voiced strong criticism against Google's Android Developer Verification (ADV) system, describing it as "a virus masquerading as a seemingly harmless process." The repository argues that the mechanism introduces unnecessary complexity and friction for app distribution and installation.
Google's ADV system requires app developers to submit verifiable information, such as government IDs or business credentials, for identity verification before their apps can be distributed. This measure is intended to enhance security within the Android ecosystem and combat the spread of malware. The system includes exceptions like limited distribution and a more complex "advanced bypass" mode for sideloaded applications.
F-Droid contends in a blog post that most Play Store apps registered under ADV were not added proactively by developers but were included automatically due to Play Store agreements, often without explicit developer consent. This situation, F-Droid argues, negatively impacts the user experience by forcing more complicated installation steps.
F-Droid proposes alternative solutions, such as triggering verification only when an app requests suspicious permissions, or allowing users to pre-select trusted curators and certifying bodies to simplify app installations. The repository also questions Google's definition of "malware," citing examples like ad-blocking filter tools that have been classified as potentially harmful when distributed outside the Play Store.