@mcc @gsuberland Not entirety because it can't stop exploits against Android's flaky platform where you have no idea if permissions are actual access control boundaries enforced by NSA^H^H^HSElinux mechanisms or just pretend controls enforced only by Java APIs...