Many companies have their own applications that they publish using a specific ID - it would simplify admin workflow to be able to whitelist and blacklist by publisher ID. 

Even internally the ability to add extensions published by *@google.com to the allow list would

* Remove 70% of the policy text
* Eliminate an automation step (borg jobs)
* Eliminate a delay between an engineer uploading an extension and it being added to the allow list