AOSP is open source. Anyone can fork it.
>Google will allow only apps from verified developers
This is done by Play Services which is not included in AOSP even.
>Only megacorps will likely be able to support a hard fork for such a large codebase.
The same can be said about any operating system. The scope of an operating system is huge.