This is not specific to Android, it is basically the antivirus industry in general. "Let's ask every possible permission and inject code everywhere in the OS so

This is not specific to Android, it is basically the antivirus industry in general. "Let's ask every possible permission and inject code everywhere in the OS so we can prevent other applications from doing so." I am usually for modularity, but I think this kind of security is part of the OS' job, and we have to move to security models where third-party AVs do not exist. Of course, this is not just my opinion, see https://news.ycombinator.com/item?id=13082832 https://news.ycombinator.com/item?id=13082832 in particular.