> The operating system uses both capabilities and permissions. No, that's still wrong. The Android framework uses something that goes a little bit in the dire

> The operating system uses both capabilities and permissions. No, that's still wrong. The Android framework uses something that goes a little bit in the direction of capabilities. But the Android framework / runtime runs (by now) on an OS (Linux) that is not capability safe. > Regardless, this is all implementation details and for the user it is equivalent. No, of course not. On a capability secure OS your mouse driver can't read the disk or do network request. Even if you would find an exploit in the driver. That's a completely different level of security! It's a fact that there is still no capability secure OS out there in broad use. (Fuchsia could be the first that brings this concept into mainstream. But this will take time. Also Fuchsia isn't as strict as it could be, for different reasons).