> what does it really have to do with?

Giving google control over what code runs on $device regardless of how that code got onto the device.

A revoked key doesn't care about how the APK got there...