I saw a google authenticator copy (using the old icon but named Authenticator) about two weeks ago. It was the top result but an ad and not by Google. Sad I didn't screenshot it, couldn't find it when searching Google Authenticator again.
Google's anti-sideloading stance is scummy for a lot of reasons, but this in particular is a bad example.