Whilst inspiring people to change their behavior is not easy, getting them to integrate these new behaviors into their daily routine is even more challenging.
According to the professor, Google's shortcoming mostly comes from a relatively skin-deep routine that checks the SHA-1 value and install package name, not underlying code that's tougher to change.