There's a lot to unpack there. I'll speak to how we apply our rules to Google Play.
As I said, we review 200 billion apps daily. For example, we found that 95% of problematic apps are being side-loaded. That's an important stat to understand when it comes to the apps that are exploiting sensitive permissions.