I don't know what you're talking about with a bad font - my Google Play v4 is in the same custom font as the rest of my system. If you don't like the font, change it. Then again I'm using Choco Cooky out of sheer laziness to pick a different one, so if Play uses Choco Cooky by default then I wouldn't know.
Tell me this, will auto-update still auto-update even if the permissions for an app change? I need to know. Feel free to disagree with me all day, but I have an ever-present awareness of a surreptitious push to trick people into allowing "developers" (term loosely defined) to spy on them at will. For example, if a developer obtains a large user-base and then pushes spyware into its app through an update at a later time. Then again, I don't doubt that developers already know how to create a false sense of security through deceitful permissions.
Here's a good example, the terms of service for the Dolphin Browser, directly after they say they collect your user data, clearly states that "MoboTap does not warrant that use of the Application will be uninterrupted, or error-free, that defects will be corrected, or that the Application is free of viruses or other harmful components." I stopped using Dolphin because if the developer is going to explicitly require me to agree that the the program COULD be malware, then you will NOT be able to convince me that it isn't. I downloaded Dolphin again just now to be able to present this argument to you, and I see that Dolphin no longer even requires you to pretend you read the terms of service before using the program! Once you start browsing I can't find a place in the program where you can read the ToS you agreed to de facto, although you can read their rather spectacular privacy policy (here's an outstanding clause: " Mobotap’s products and services are not intended for use by individuals under the age of thirteen (13), and we request that such individuals do not provide Personal Information through our Dolphin Browser or Dolphin Services"). Now this is just one, apparently well-trusted example! How many developers are pulling this crap and not even mentioning anything about it?
A few months ago I noticed in the middle of the night that my 3G icon indicated solid upload and I didn't know why. So I turned off the mobile data and it went away, then I turned it back on and it immediately continued uploading (for about 10 minutes). I still have no idea why. If you want to try to tell me my phone wasn't designed to spy on me then stop because you're simply not going to be successful.
I believe there's a tiny chunk of Google that is dedicated to compromising your user privacy any way they can get away with. But you can believe whatever you want.