Here’s a nice article on Android’s security flaws and latent bugs from the CTO of Green Hills Software, Dave Kleidermacher :  https://www.embedded.com/electronics-blogs/davek-security-blog/4211444/Angry-Bird-droppings. Looks like there is some work to be done to help properly secure Android!