> Are we sure it can't?
Google can remotely uninstall, and install a trojaned version of any app regardless of app signature on an official Android distribution.