A significant change that google implemented (announced?) for android recently was not allowing you to install software or allow "unknown sources" while on a phone call.

I think that's going to have a far more significant impact on people installing malware than developer attestation.