[pjmlp]

Large majority of Android security exploits are in C and C++ written drivers, hence why with each release the amount of freedom with native code gets further locked down.

Android Q has another round of such measures.

https://android-developers.googleblog.com/2019/05/queue-hard...

[mpol]

Those may be security exploits, but the real malware is what gets installed through Google Play.

[maroonedanchor]

Hence a Play Store free alternative like GrapheneOS.

[pjmlp]

Nothing can be done to prevent stupid users to install everything that shines.

Even HNers do curl | sh without thinking twice about it.