Not to defend google but the problems they are having now to access their own google play are the same problem a scammer would have to go do it.

It does not look like a perfect balance, but they apparently err on the security side.