[makomk]

Yeah, they did that using a very aggressive Google-provided tool called SafetyNet designed exactly for that purpose, which downloads a program from Google's servers and runs it with system-level privileges to do the checks.

[heh]

Incidentally, as I understand it SafetyNet is intended for verification of device integrity when you use Google Pay - i.e. as a NFC wallet.