Sanctioned developers can’t verify, so Google waived it.

Starting September 30, Android will block unverified apps globally except in Iran, Cuba, North Korea and occupied Ukraine, where verification is unavailable.

Virtual private networks, secure messengers and opposition media built there stay distributable only in a second-tier bubble Google can revise anytime.

Sources: Ars Technica