I don't think the stuff in the article is really that great. Google is basically shoring up a few possible avenues of man in the middle attacks. Meanwhile, the

I don't think the stuff in the article is really that great. Google is basically shoring up a few possible avenues of man in the middle attacks. Meanwhile, the mobile ecosystem is still rife with many other avenues - your MVNO, fractured Ma Bell, Play Services still has outsized privileges on standard Android, most apps aren't E2EE (despite the article's bastardized use of the term), etc. It's just this boring corporate security narrative where we're supposed to continue ignoring the 800lb gorillas selling our personal information into countless surveillance databases and focus on how they're closing down possible independent attackers. What would be newsworthy is if they were even talking about real security - libre baseband, mitigating protocol identifiers (eg IMEI) that allow for pervasive location tracking, etc.