This assumes that Google actually does reduce malware and scams within their garden, but they do not. They are just as prevalent (perhaps more so) within the apps that Google certifies.

So the only thing it kills is the risks to Google's revenue, not the risks to users' security.