Aside from the microkernel, doesn't Android already do capability based security?
Capability based security like Fuchsia has means that there is no ambient authority, or in other words no singleton resources. No fopen(), no connect(), etc. Instead, processes access everything through file-handle-like objects that are given to them by their creator, which can thus be sandboxed/mocked/revoked/etc without anything extra like containers or jails or VMs.