On a side note, I don't love Google's rules as I understand them. They seem to punish prompt action and honest communication in some cases (eg. this one). I think you should just get the 90 days if they're willing to allow it. Of course, this is always their call.
EDIT: Other users are saying the short deadline is because the public will be made aware of an exploit, due to existence of a patch. I did not think of that initially, but it does make sense
Epic is also saving their users some bucks. I'm not so sure that users hate the tradeoff.
More like 5 - Nintendo, Microsoft, and Sony all control what software goes on their platform either digitally through their console app stores or physically since all media has to have keys from the console makers to run.
Sure, it provides extra security, but at a heavy cost.
Seeing how the last 30+ years of personal computer use has played out, the vast majoriyy of users should probably be using locked down devices.
And Epic provided the perfect example of why app developers should be forced into a strict sandbox. I need my phone to always work itβs much easier for me (but not most people) to recover from a virus/malware/ransomware on my computer than a hypothetical one on my phone.
Similarly, I also wouldn't care if a random hacker or reputable firm disclosed Target's vulnerabilities when they put millions of customers at risk. I'd blame Target by a big margin.
The Fornite APK itself is also <100MB.
There is nothing stopping Google and Apple charging a fixed fee for the cost of verifying the quality of submissions to the App store. The 30% is just pure rent-seeking, and frankly now it's monopolistic on Google's side.
It looks like the Fortnite APK is 1.88GB. I don't have familiarity with the Android platform, can you update via patches (over a full binary download)? If updates are anywhere near that size, a 7 day disclosure after patch is patently irresponsible (play store or not). This smells like a cheap PR play by Google.