If you don't trust Google, commercial Android is not for you.
Google can push apps onto your phone and the apps can run without interaction on the phone. Often that's useful and authorized by the user --- you can use the google play website to push things, but this case shows it's not limited to that. I don't think you can disable this through settings, you would have to disable play services or block the networking or not have gapps installed or something.
Play services runs in a priviledged mode and generally updates itself, so there's a lot of trust needed.
Afaik, all modern commercial OSes intended for end users have a similar level of trust required for the vendor. The capability to push code run in a privileged space enables rapid response to emergent malware, but also enables the vendor to take actions without explicit consent.
> The suit, as described, leaves a lot of questions.
Here's what the suit alleges:
>To increase adoption, starting on June 15, 2021, DPH worked with Google to secretly install the Contact Tracing App onto over one million Android mobile devices located in Massachusetts without the device owners’ knowledge or permission. When some Android device owners discovered and subsequently deleted the App, DPH would re-install it on to their devices.
Google made a statement confirming that the app was pushed by the Play Store at the time:
>We have been working with the Massachusetts Department of Public Health to allow users to activate the Exposure Notifications System directly from their Android phone settings. This functionality is built into the device settings and is automatically distributed by the Google Play Store
So Google Play Store installs apps without consent.
And one can't unistall Google Play Store.
Ergo, we finally need to liberate our phones and tablets with an open alternative which isn't F-Droid.
You would be naive to believe that Android/iOS are secure in this respect. Pretty much every government in the world has a "need" to surveil their population, and have "insisted" upon this capability.
You're saying a State Government can request Google installs a 3rd party app on 1 million phones? If that's true then I'm genuinely astonished. And more so that it wasn't headline news at the time.
Or maybe there's more to this than currently is apparent.
> You're saying a State Government can request Google installs a 3rd party app on 1 million phones? If that's true then I'm genuinely astonished. And more so that it wasn't headline news at the time.
Yes. That's what happened. (I'm not sure if the 1E6 phones claim is accurate, but it was a non-trivial chunk of people near MA).
The suit, as described, leaves a lot of questions.