^this. As long as Google remains an advertising company with some incidental technology projects - they'll be hard pressed to ever fight internal culture/revenu

^this. As long as Google remains an advertising company with some incidental technology projects - they'll be hard pressed to ever fight internal culture/revenue enough to take meaningful steps towards privacy and security. Just being able to write an app (code on the device) and deploy an ad (code on the Internet - possibility to run "code" like fonts, or trigger calls to site/unique.jpg) - would make preventing data exfiltration and/or tracking absurdly hard while continuing to cater to advertisers aka the paying customers.