This article wholly misses the point. Android is not a secure OS because it enables and allows behaviors that make it leak data and protect the user poorly. Sec

This article wholly misses the point. Android is not a secure OS because it enables and allows behaviors that make it leak data and protect the user poorly. Security isn't just a matter of not having memory vulnerabilities or using good encryption. That's where Google and it's advocates have failed to understand what security is. Security is keeping something safe. And with the amount of data exfiltration Google's default platform plus the apps it allows and encourages do does not do a good job securing your information. When a user installs an app that does behavior they didn't expect or intend to permit, that's a security issue, even if the platform APIs allowed it. The difference in how Apple and Google approach Web APIs discussed a couple days ago highlights this: Google added a ton of APIs that lets websites do stuff with your computer, Apple decided they are risky and chooses not to implement them. Google would say the user has to give permission for those APIs to be used, so there's no security flaw if a website uses them maliciously: The user gave permission. Whereas, Apple would recognize the benefits to the user are minimal compared to the risk when the user grants permission unintentionally, which happens all the time for other web APIs like push notifications and even extension installs. Practical security and technical security are two different things. Google does not even comprehend the former, while receiving wide accolades for their expertise at the latter, as in this article.