Pixel Purrito on Nostr: that misses the point, signature spoofing is not a “free for all” way of spoofing ...

that misses the point, signature spoofing is not a “free for all” way of spoofing applications, and packages that use it need to be given explicit permission to use it. When you use a ROM that includes microG bundled the permission is pre-approved for microG packages but nothing else. So yes, I agree with Thom that it seems dumb to move the Google Services to a container, because they will do the same they did before in there