Several smartphone vendors have undermined Android’s security model with their pre-installed apps. The apps pass on privileges to other apps without requesting user confirmation, and this can be exploited by attackers