The big difference between Debian and Android is that with Debian you don't generally want or need to run untrusted or untrustworthy 3rd party code. Instead you

The big difference between Debian and Android is that with Debian you don't generally want or need to run untrusted or untrustworthy 3rd party code. Instead your software comes from trusted source with maintenance promise and security updates. And I'm starting to think that is better model than trying to sandbox and lock down everything; the world needs more trust at certain places. In contrast you are no way able to trust random Android apps, neither the quality or the intentions, so you are left with actively hostile relationship between you, the OS, and the apps.