The developers have probably surrendered their identities and the apps got reviewed, verified, and can be distributed to end users via official stores, so it can't be so bad because they keep users safe.

Funny that the verification step doesn't include scanning for hard coded credentials though. How do they detect malware if they don't decompile?