Google's PlayServices has a built-in backdoor which allows Google Inc, or anybody who has access to some device owner's Google account to remotely silently deploy any apps (at least those listed in the AppStore).
e33e4b676a65b515729c81271908d18c840aadc2370f8a5643c5cdf980ce1785