> Depending on your threat model this might mean that you should avoid using Android altogether for anything sensitive

I once worked with someone who worked with someone that had previously been a major Android fanboy, but after doing some work that required a security clearance, they became an iPhone user and insisted their family get iPhones too.