But which app is the bad one?
As ever, it is another bad app with a common name! If the Play Store did just one simple thing to boost security, it would be to give every App a unique store ID! Then this sort of story could say "Barcode scanner, program ID Y6D88" and then all us humans could tell which exact program was the bad one!
I recall when one of the popular "flashlight" apps went bad, and there were about 1000 apps called the same name. Stop it, Google!
You'd also be able to recommend a specific app, instead of the current ludicrous "search 'xyz' in the Play store" gamble.