[pjmlp]

> Android is Linux....

Kind of, Google can release Android running on top of any OS that implements the NDK stable APIs, plus their POSIX subset, and besides OEMs no one would notice the change.

https://developer.android.com/ndk/guides/stable_apis

Other than that I fully agree with your statement regarding being a security weakness.

[strcat]

Yes, that's true. I mean the Android Open Source Project, rather than Android as an OS family. For Android as a platform defined by the Compatibility Definition Document / Compatibility Test Suite, it doesn't have a specific kernel, and Windows could have become certified as Android if they had actually gone ahead with pursuing that.