In what part of the report do they call on Google and Apple to "give up control over the mechanisms which have allowed them to clamp down on malicious financial activity including some (but not all) subscription traps and scams." ?
In the same breath, Google and Apple are also being told that these very same mechanisms are a concern to the ACCC.