> Google is not obligated to reply at all nor do they have any obligation to hold on these announcements. There are no faults for Google here.
This is a non-sequitur. You are equivocating between legal obligation and ethical obligation.
This is a non-sequitur. You are equivocating between legal obligation and ethical obligation.
Google's original view of the situation was that installers like this make devices measurably less secure (to which Epic's response was pretty meh), and the installer being exploitable to install pretty much anything only proved that point and then some.
...and frankly, it would not matter who wrote the installer if it got used for a mass infection and attack. Google would still get the bad press and a generous helping of blame because of the trashy way so many "tech reporters" behave to get those mouse clicks.