A nice reality check about Android security in general

[svim]

https://www.computerworld.com/article/3268904/android/android-security-facts.html

 

[mikedt]

2. Even if it is somehow installed, Android malware is highly unlikely to be able to access any sensitive data

Up until Android 5.x, malicious apps could so easily use root exploit payloads to do that, thereby negating security and permissions on the device. And this is primarily why so-called "one click" vulnerability exploit rooting tools like KingRoot and similar no longer work with Android 5.x or later.

4. Your odds of actually encountering Android malware in the real world are almost laughably low.

I assume they've never used Android in China... And the importance of only installing apps from trusted sources, like Google Play, especially if you have a device running an older version of Android. Which brings up point 6.....
6. Your own common sense goes a long way in keeping you protected

 

[svim]

Just an updated analysis, from the same author. Another nice summary debunking a lot of the click-bait hype that saturates the media.
https://www.computerworld.com/article/3411440/android-security-scares.html