Very interesting and in depth article, thank you very much for posting it. Does anyone know why android chose not to use LSM or other kernel based capability e

Very interesting and in depth article, thank you very much for posting it. Does anyone know why android chose not to use LSM or other kernel based capability enforcement? It would seem like such a hands off platform would be ideal for fine grained enforcement - allowing some amount of security to be maintained even in light of a privilege escalation exploit.