All those extra tools present attack surfaces. What Android allows is already leaps and bounds beyond (non-jailbroken) iOS. Android's great weakness is the (no

All those extra tools present attack surfaces. What Android allows is already leaps and bounds beyond (non-jailbroken) iOS. Android's great weakness is the (non-updatable) kernel and its drivers. Any constraints that can be applied to protect them, must. A towelroot-class vulnerability isn't just a user tool, it can also be exploited by malicious apps. SELinux is far more intrusive in Android than on CentOS. Nobody would put up with these restrictive permissions in a desktop OS.