No doubt many “legitimate” apps, including some of Google’s own are spyware. This claims to be about the sort of malware that steals your bank account login.

I’d even speculate that most of the people involved are working in good faith; they think they’re the good guys and they can be trusted with that kind of power. Nobody should have that kind of power though because it always leads to corruption.