> They are alleging that this was installed on a million phones,

This allegation is based up the number reported by Google that is available to the public.

> I'm sure doing some straightforward technical forensics would make it clearly apparent what was going on.

Why? Why spend the money to hire a forensics analyst or a team, when through discovery you can learn that information straight from the source. In my opinion it would be worth it to wait to see if the lawsuit actually progresses and is not immediately slapped down by a judge. If immediately slapped down then you just wasted money, by waiting to ensure it’s approved to move forward you can save some money.

I will admit I have not read completely the actual filing, which probably will shed more light on it than an article.