@triskelion @GrapheneOS Seccomp. On Android, "untrusted processes" is all Android processes (vs system stuff with no Java/Android process entity).