Android has user visible APIs to interact with secure crypto hardware. https://developer.android.com/privacy-and-security/keystore#HardwareSecurityModule https

Android has user visible APIs to interact with secure crypto hardware. https://developer.android.com/privacy-and-security/keystore#HardwareSecurityModule https://developer.android.com/privacy-and-security/keystore#... But I agree in general with your point