@dalias@hachyderm.io @agreenberg@infosec.exchange both Android and iOS poked major holes in their security just to accommodate websites that behave like apps. In Android your entire security hinges on SELinux. If for even a split second that gets set to permissive (which it does on some OEM flavours of Android during boot), a rogue process can just setuid(0); and own the whole system