[mcpherrinm]

The Android sandbox on ChromeOS was pretty weak until recently, sharing a kernel with significant attack surface with the underlying chromeos.

Android 11 on ChromeOS is being deployed as a lightweight VM, called ARCVM: https://chromeunboxed.com/how-to-check-your-chromebook-new-a... It’s similar to how the Linux VMs on chromeos work.

[mcpherrinm]

Better link: https://chromeos.dev/en/posts/making-android-more-secure-wit...