Android security in 2016 is a mess