[fragileone]

An OTA Android update which modifies your apps would make it incompatible when those apps try to update themselves at a later point and find different signed apps. This would out Google as hostile immediately since there would be no other party who could feasibly swap out your apps.

Whilst not preventative, even one attack would likely get enough media coverage it'd destroy Android by Google trust irreversibly.