Android ecosystem security implications