So if they certify everything that defeats the point, because they'd just be
certifying Trojans. They need to test properly and make sure the source of
the app is known or they expose the network.
If you de-cert your phone and run something that sends 10,000 SMS messages,
when you get your bill and call orange to say "I never sent these I want a
credit", they can turn round and say "Your phone did it. We protected it and
you removed the protection, so tough". If they sign an app that does it then
they would have to process all those refunds. I suspect they don't care
about the money, but they don't want customer service to get wiped out.
And what makes you think that "moaning bastards" as you call them won't find
something else to moan about ??