Why doesn't google just approve verified app stores? Like how a linux repo can be verified and not require the app developer to have to?