Just the thought of Google being able to do something like this scares the $&@*#% out of me. How on earth can you trust a company that does something like this?
Everyone trusts Google, whether they like it or not. This is the definition of trust that security operations use: A trusts B if B is capable of doing something nasty to A.
Google has a heck-load of money. They could pay a disreputable aggregate company to deliver a load of tonne-bags of gravel to my front garden, blocking my car in, and generally destroying the landscaping. I trust them not to do this, and the reason this is true is because I haven't taken 100%-effective steps that would prevent them from doing so, and therefore they are capable of it. This example may seem a little ridiculous (there are no 100%-effective steps I could take, and I think they're trustworthy on this particular score), but it is a technically correct example of how everyone trusts Google.
Putin or Kim Jong Il or Brad Pitt could also pay to get gravel delivered to your address. You have not taken any specific 100% effective steps to prevent them, any more than you’ve done with Google, right?
Many might not have a choice. If you need a SmartPhone and can’t afford an iPhone, you’re out of options. Most of the apps people actually need has to be installed via the Play Store.
You basically get a (more) privacy focus OS from a luxury brand or you get your OS from an advertising company.
To some extent, but this is beyond what is acceptable. Even if this is so support COVID notifications. Any install on an unmanaged device should be asking for permission to install something, unless you opt-in or something.