In addition to all other people have said, many accounts still have 2FA as secondary protection. The cost for them to 1) compromise the whole Play store; 2) Make you update both the password manager app AND authenticator app; 3) Make you login to a valuable account is way more expensive than just install a keylogger or try various scams.

As the joke tells, I don't have to beat the chasing bear behind me, I only need to be faster than the guy running alongside me.