Google has some documentation about their virtualisation setup: https://source.android.com/docs/core/virtualization https://source.android.com/docs/core/virtual

Google has some documentation about their virtualisation setup: https://source.android.com/docs/core/virtualization https://source.android.com/docs/core/virtualization From what I've read, I interpret it as pKVMs being intended to work like ARM's TrustZone, except without the dependency for paying bank to ARM and early-boot initialisation shenanigans. The way AVF exposes large parts of the Android API will allow future Android versions to be rewritten into many small modules all running in a QubesOS-like hypervisor setup without rewriting them from the ground up. I don't think that's implemented at the moment, though, or if this is only intended for a few specific Android components.