[swinglock]

I don’t think it stops with the Google software. You will still more likely than not have proprietary binary blobs running in your kernel to support your proprietary hardware executing proprietary firmware that is as large as operating systems themselves, the largest with the biggest attack surface waiting the process anything they can on 2G, 3G, 4G, WiFi and Bluetooth bands.

Android is more open than iOS but it’s not really open enough to make a significant difference, not for 99% of users and not really for the 1% that think it is more secure or private because they run a (heavily modified, very old, probably abandoned by the manufacturer) Linux kernel but ignore the baseband and closed source camera driver.