> However, our recent analysis found over 90 times more malware from sideloaded sources than on Google Play

Google has seemingly never seen an elderly person's phone, where it is completely infected with crap including literal popup ads (that somehow overlay other apps), yet all of it was downloaded from GPlay.

100.00% this take. Google is redefining "malware" to fit their corporate narrative so ads-with-ads-with-tracking is labeled as fine wine. It simply cannot be malware because that truth would decimate their shareholders. Malware by any other definition remains software that disrupts the user's ability to operate the device:

https://en.wikipedia.org/wiki/Malware

https://www.ibm.com/think/topics/malware

https://www.cloudflare.com/learning/ddos/glossary/malware/

https://www.cisco.com/site/us/en/products/security/what-is-m...

https://www.britannica.com/technology/malware

https://www.fortinet.com/resources/cyberglossary/malware

https://www.kaspersky.com/resource-center/threats/what-is-ma...

https://www.mcafee.com/learn/malware/

https://www.trendmicro.com/en_us/what-is/malware.html

https://www.t-mobile.com/home-internet/the-signal/internet-h...

https://www.merriam-webster.com/dictionary/malware

Both things might be true. Sideloaded apps are probably way more likely to be malicious, but also most installed malware/crapware is quite likely coming from Google Play.