I don't think android is really a special case, SELinux is still hard. The only thing that makes android special is that google engineers have put in a lot of

I don't think android is really a special case, SELinux is still hard. The only thing that makes android special is that google engineers have put in a lot of work to make SELinux work. It's a powerful tool, but if you want the benefits of SELinux it takes significant effort somewhere in the development chain.