"but doesn't google verify the devs?"
no. they verify the account. they do not verify the human pushing the code.
this is how the $7m trust wallet hack happened. hackers didn't break the encryption. they hijacked a session.
google saw a logged-in user, it didn't ask "is this actually the developer?"
this is the gap billions official profiles fills
it moves us from "login security" to "action security." imagine if every code push required a biometric signature. a face scan linked to a government id.
password stolen? doesn't matter. cookie hijacked? doesn't matter.
with the billions sdk, you can