Except for the ridiculously powerful permissions you need to give most system-type apps in order for them to function (i.e. read and paint over all screen content) because the accessibility APIs are shit, and password manager APIs too fragmented to be useful.
Sometimes the policy of “you will use our API and you will be happy” is actually beneficial for users.
Except for the ridiculously powerful permissions you need to give most system-type apps in order for them to function (i.e. read and paint over all screen content) because the accessibility APIs are shit, and password manager APIs too fragmented to be useful.
Sometimes the policy of “you will use our API and you will be happy” is actually beneficial for users.
It has its flaws, like any other system. But it is a lot more secure ootb than most peoples' Windows installation, for example.
Is that a low bar to clear? Yeah, I guess. But it clears it by quite a margin.