Would love to know if they've lost control of their Play Store accounts, i.e, is there any risk of compromised app updates?

Holy crap.