At what point should Google and Apple (and throw in F-Droid or whatever other App Store) be responsible for vetting the security of some of these apps? Regardless of recall laws, if the wheels come ...
What about a “label” that the app has been audited and it is OK? I don’t know if stores could do that themselves or if the auditor has a “webpage” where it lists the audited software with the results ...