> (it's like any other system that gives untrusted users non-root access to Linux: you can probably get away with it, but eh) This is far from true. Android ha

> (it's like any other system that gives untrusted users non-root access to Linux: you can probably get away with it, but eh) This is far from true. Android has always had a ton of sandboxing. Every app is its own user, unable to interact arbitrarily with other apps, things like that. You won't find any desktop OS that comes anywhere close to the security design of Android. But the thorn in Android's security side remains updates, or lack thereof. > Android's attack surface is much higher than Chrome OS's. Not really. All you have to do in CrOS is compromise Chrome (which has happened plenty of times), and you have owned the user. You've won. Game over. And Chrome's attack surface is huge, just like any other browser's. The kernel syscall interface is relatively tiny, and SELinux clamps that down even further.