Cloak and dagger: taking control of the Android UI feedback loop

"SYSTEM_ALERT_WINDOW and BIND_ACCESSIBILITY_SERVICE. If an app can gain both of these permissions, it’s game on"....I mean c'mon....even before looking it up I could guess that BIND_ACCESSIBILITY_SERVICE would give an app broad permissions.